Encrypted Release Dataset for Secure Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems face security vulnerabilities due to insecure transmission of release datasets, which can lead to misuse when releasing functions, especially in scenarios requiring secure verification of access authorization.
Innovation Solution
A method involving encryption of release datasets using a combination of a release key and individual security features, where the release key is known only to the central and local data processing units, and the individual security feature is communicated separately, ensuring secure decryption and verification by the local data receiving unit, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If release dataset is transmitted wirelessly from mobile terminal device to local locking unit, then convenience of access control is improved, but security against misuse of release dataset deteriorates
Solution Approach 1:
The release dataset is segmented into two parts: an encrypted first part containing release criteria transmitted to the mobile terminal, and a second part remaining in the central system. The mobile terminal can present the first part to local locking units, but without the second part, the release criteria cannot be fully verified, preventing misuse while maintaining convenience.
Solution Approach 2:
The encrypted release dataset acts as an intermediary between the central authorization system and local locking units. It carries authorization information in encrypted form that can be verified by local units without requiring continuous connection to the central system, enabling offline access while maintaining security through cryptographic protection.
2Reliability
If release dataset is encrypted with release key known only to central and local data processing units, then security of transmission is improved, but complexity of key management increases
Solution Approach 1:
The critical second part of the release dataset (containing essential verification data) is extracted and retained in the central system rather than being transmitted to mobile terminals. This allows the first part to be freely distributed to multiple devices while the central system maintains control through the retained second part, simplifying key management while preserving security.
Solution Approach 2:
The release dataset is prepared and encrypted in advance by the central system with the release criteria and authorization information. This preliminary encryption action ensures that when the dataset is transmitted to mobile terminals, it is already secured, eliminating the need for complex real-time key management during transmission and use.
3Reliability
If additional security mechanism is provided above and beyond transmission of release dataset, then security against misuse is improved, but device complexity increases
Solution Approach 1:
The authorization data is segmented into a first part transmitted to mobile terminals and a second part retained centrally. This segmentation provides additional security because even if the first part is compromised, the second part held centrally prevents unauthorized use, adding security without requiring complex additional mechanisms at the mobile terminal.
Solution Approach 2:
The system implements partial encryption where only the critical second part of the release dataset remains secured centrally, while the first part can be freely transmitted. This partial approach provides sufficient security against misuse while avoiding the excessive complexity of encrypting the entire dataset in a way that would require complex key management at mobile terminals.
Data Source
AI summary
A method is described for the release of use of functions of at least one local data receiving unit (1) for a user by means of a central data processing unit (7) and the at least one selected local data receiving unit (1). The local data receiving unit (1) is configured to receive an encrypted release dataset from a user and to release use if at least one security feature contained in the release dataset in each case matches a corresponding release criterion stored in the local data receiving unit (1). The method comprises the following steps:a) generating a release dataset through encryption of at least one release criterion by the central data processing unit (7) with a release key known to the central data processing unit (7) and to the selected local data receiving unit (1) and with an individual security feature of the user known to the central data processing unit (7);b) transmitting the encrypted release dataset from the central data processing unit (7) to the mobile terminal device (4);c) transmitting the release dataset from the mobile terminal device (4) to the selected local data receiving unit (1) together with an individual security feature of the user;d) decrypting the release dataset encrypted with the combination of the release key and the individual security feature in the selected local data receiving unit (1);e) releasing the use of a function in the event of successful verification of the release criterion contained in the decrypted release dataset.