Algorithm Library Protection via Terminal-Specific Encryption Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing algorithm library protection methods for handheld terminals are vulnerable to simple attacks, allowing unauthorized use without cost.
Innovation Solution
A method where a terminal sends identification information to a server, which generates and encrypts a configuration file using a digest algorithm and encryption key, ensuring only authorized terminals can access and use the algorithm library by decrypting the configuration file and verifying it against a generated verification code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing algorithm library protection methods are used, then the algorithm library can be provided to terminals, but the protection is vulnerable to simple attacks allowing unauthorized use
Solution Approach 1:
The protection mechanism is segmented into multiple independent components: terminal identification verification, first information collection, encryption key generation, configuration file creation with digest algorithms, and encrypted data transmission. Each component performs a specific security function, creating layered protection that is more resistant to attacks than monolithic protection methods.
Solution Approach 2:
The system performs preliminary actions before providing the algorithm library: verifying terminal identification, collecting first information from the terminal, generating encryption keys in advance, and creating encrypted configuration files. These preliminary security measures ensure that only authorized terminals receive protected data, preventing unauthorized access before it can occur.
2Reliability
If terminal identification and encryption verification are implemented, then unauthorized access is prevented, but the data acquisition process becomes more complex
Solution Approach 1:
The server acts as an intermediary between the terminal and the algorithm library. It receives terminal identification, verifies serviceability, collects first information, generates encryption keys, creates configuration files with digest algorithms, and transmits encrypted data. This intermediary approach centralizes complex security operations on the server side, keeping the terminal relatively simple while maintaining strong protection.
Solution Approach 2:
The system changes parameters dynamically during the data acquisition process: generating unique encryption keys based on terminal-specific first information, creating configuration files with terminal-specific digest algorithms, and providing encrypted data tailored to each authorized terminal. These parameter changes ensure that each terminal receives customized protected content, enhancing security while managing complexity through systematic parameter management.
Data Source
AI summary
The method comprises the following steps: a terminal sending an acquisition request for acquiring data to a server, wherein the acquisition request comprises identification information for identifying the terminal;the server judging whether the terminal is a serviceable terminal according to the identification information; the server sending a request for the terminal to provide a first information when the judgment result is that the terminal is a serviceable terminal; the terminal sending the first information after receiving the request; the server receiving the first information and generating an encryption key for a configuration file based on at least the first information; the server processing the identification information by using a digest algorithm and writing the processing result into the configuration file; the server encrypting the configuration file with the encryption key; and the server sending the encrypted configuration file and the data to the terminal.