Encrypted Data Exchange Using Image Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for exchanging encrypted data between a terminal and a machine require a smart card reader, limiting user access due to the need for a specific device and increasing complexity in managing passwords.
Innovation Solution
A method using image encryption codes, such as QR-Codes or barcodes, where a terminal recovers and decodes encrypted data using a public key and decrypts it with a private key obtained from a second image encryption code, eliminating the need for a smart card reader and allowing passwordless access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a smart card reader is used for encrypted data exchange, then security is improved, but device availability and ease of operation deteriorate
Solution Approach 1:
The patent replaces the mechanical smart card reader system with an optical/image-based system. Instead of requiring physical contact with a card reader, the invention uses image capture devices (cameras, scanners) to read visual codes displayed on any display device, substituting mechanical interaction with optical recognition and eliminating the need for specialized hardware readers.
Solution Approach 2:
The invention makes the encrypted data exchange system universal by enabling it to work with any device that has a display and an image capture capability. The system can exchange encrypted data between any terminal and any machine without requiring specific dedicated hardware, making the solution applicable across multiple platforms and device types.
2Reliability
If a smart card reader is required, then security is improved, but device complexity and accessibility worsen
Solution Approach 1:
The patent replaces the mechanical smart card reader system with an optical/image-based system. Instead of requiring physical contact with a card reader, the invention uses image capture devices (cameras, scanners) to read visual codes displayed on any display device, substituting mechanical interaction with optical recognition and eliminating the need for specialized hardware readers.
Solution Approach 2:
The invention uses visual codes (images) as a copy or representation of the encrypted data and keys. Instead of transferring data directly through complex hardware protocols, the system creates visual representations of the cryptographic information that can be captured and processed by any image-capable device, simplifying the transmission mechanism.
3Reliability
If passwords are used for authentication, then access control is improved, but user convenience and ease of operation worsen
Solution Approach 1:
The patent implements self-service authentication where the user's terminal automatically performs the authentication process by capturing the visual code, decoding it, and using the embedded cryptographic keys for verification. The user simply needs to capture the image, and the system handles the complex authentication steps automatically, eliminating the need for users to manually enter or manage passwords.
Solution Approach 2:
The visual code serves as an intermediary that carries the cryptographic authentication information between the machine and the terminal. Instead of direct password entry or complex key exchange protocols, the visual code mediates the authentication process by embedding the necessary cryptographic data in a format that can be easily captured and processed.
Data Source
Figure 1~2
Figure 3a
Figure 3b
AI summary
The present invention relates to a method of exchanging an encrypted data item (Cph) between a terminal (UE) and a machine (DEV), the method comprising the steps of: retrieving by the terminal (UE) a first image encryption code (QRC1) comprising said encrypted data item (Cph) on the basis of a public key (Kpu), said first image encryption code having been generated by said machine (DEV); decoding said first image encryption code (QRC1) in said terminal (UE) so as to obtain said encrypted data item (Cph); decrypting said encrypted data item (Cph) by means of a private key (Kpv) recorded in said terminal (UE), said private key (Kpv) having been obtained on the basis of a second image encryption code (QRC2) generated by said machine (DEV).