Cryptographic Processing System Using Segmented Memory and Intermediary Test

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Many cryptographic processing systems lack secure memory to store sensitive data, making them vulnerable to attacks, and existing solutions like CAPTCHA-based systems can be bypassed through brute force methods due to limited complexity of passwords.

Innovation Solution

A cryptographic processing method and system that stores a reference value and test in memory but not the solution, requiring user interaction to differentiate humans from computers, thereby enhancing security by preventing automatic recovery of sensitive data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If sensitive data is stored in unsecured memory due to lack of secure memory space, then the system can function with available resources, but the system becomes vulnerable to attacks and sensitive data can be easily recovered

Engineering Contradiction:
Improvesecurity of sensitive dataVSAvoidmemory architecture
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the sensitive data storage into two parts: a secure part (stored in unsecured memory but protected by cryptographic functions) and a test part (stored in unsecured memory). This segmentation allows the system to maintain security without requiring dedicated secure memory hardware, resolving the contradiction between security and device complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a test (such as CAPTCHA) as an intermediary mechanism between the stored data and the authentication process. This test acts as a mediator that prevents automatic brute force attacks while allowing human users to authenticate, thereby improving security without adding complex hardware components.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If password hash values are stored to prevent direct password recovery, then security is improved, but brute force attacks can still recover passwords by testing various possible passwords

Engineering Contradiction:
Improveresistance to password recovery attacksVSAvoidauthentication process
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a test (such as CAPTCHA) as an intermediary that must be solved during authentication. This intermediary prevents automatic brute force attacks by requiring human cognitive processing, while still allowing legitimate users to authenticate. The test is stored in unsecured memory alongside the password hash, creating an additional layer of security without complicating the user experience.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If the solution to the test is stored in memory alongside the reference value, then the authentication process can be completed, but attackers can automatically recover both values and bypass security

Engineering Contradiction:
Improveauthentication speedVSAvoidsecurity against automatic attacks
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent uses the test as an intermediary element that is stored in unsecured memory alongside the reference value. The test acts as a security barrier because while both the test and reference value are accessible in memory, an attacker cannot automatically exploit them without solving the test, which requires human cognitive processing. This maintains authentication speed while improving security against automatic attacks.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2772869B1Method and system for cryptographic processing using sensitive data
Publication Date: 2017.07.19 OBERTHUR TECH SA
  • EP2772869B1 patent drawingFigure 1
  • EP2772869B1 patent drawingFigure 2~3
  • EP2772869B1 patent drawingFigure 4~5

AI summary

The method involves configuring a cryptographic processing system i.e. terminal by obtaining and memorizing a reference value (Co) in the terminal (E0). A memorized test (ChallR) is transmitted (E10) to a user, and a response (R') is obtained (E20) from the user. A cryptographic processing of the reference value and a cryptographic function is performed (E30) based on a sensitive data item e.g. password, where the reference value and the test are in the memory of the terminal, and a solution is not in the memory of the terminal during the transmission of the test. Independent claims are also included for the following: (1) a computer program for cryptographic processing (2) a processor readable medium storing a program for cryptographic processing (3) a cryptographic processing system.