Format-Preserving URL Encryption for NFC Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing URL communication methods face challenges in securing data transmitted between an electronic tag and a computer or server via an NFC reader, as encrypting the entire URL would require the NFC reader to have decryption capabilities, and conventional binary encryption algorithms are not suitable for URLs composed of ASCII characters.
Innovation Solution
The method involves encrypting only the data-bearing part of the URL using a format-preserving encryption algorithm, such as the FF1 algorithm, to convert binary data into ASCII printable characters, allowing the NFC reader to access the unencrypted domain name while keeping the encrypted data secure from the reader.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the entire URL is encrypted, then data security is improved, but the NFC reader requires decryption capabilities which increases device complexity
Solution Approach 1:
The patent divides the URL into two segments: the domain name part (unencrypted, readable by NFC reader) and the data-bearing part (encrypted, invisible to NFC reader). This segmentation allows the NFC reader to function without decryption capabilities while maintaining security for the sensitive data portion.
Solution Approach 2:
The patent extracts only the necessary unencrypted portion (domain name) for the NFC reader to process, while taking out the sensitive data-bearing part and encrypting it separately. This extraction allows the reader to access what it needs without exposing it to decryption requirements.
2Reliability
If conventional binary encryption algorithms are used, then encryption strength is improved, but URL compatibility deteriorates because binary data cannot be represented in ASCII characters
Solution Approach 1:
The patent changes the parameter of the encryption algorithm from conventional binary encryption to format-preserving encryption (FPE) that operates on ASCII characters. This parameter change allows the encrypted data to maintain URL format compatibility while preserving encryption strength through algorithms like FF1 that encrypt ASCII characters while preserving their format.
Data Source
AI summary
The present disclosure relates to a method for communicating between an electronic tag and a computer connected to the internet, wherein the electronic tag: encrypts at least part of the information to be transmitted, using a data format preserving algorithm; generates a URL comprising at least the encrypted part of the information; and transmits the URL to an NFC reader.