Identification Information Management System Using One-Way Hash Functions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identification information management systems in information communication systems face challenges in balancing anonymity and manageability, particularly when using dynamically-changing identification information, as they struggle to accurately identify and manage terminals while ensuring privacy protection.
Innovation Solution
The system employs a one-way hash function to generate terminal-unique identification information, where values satisfying a conditional equation are used as identification information, allowing the site management apparatus to determine terminal identity by substituting these values into the hash function, thereby ensuring both anonymity and manageability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dynamically-changing identification information is used for privacy protection, then security is improved, but manageability deteriorates
Solution Approach 1:
The identification information is segmented into two distinct types: first identification information (fixed, terminal-specific) and second identification information (dynamic, session-specific). This segmentation allows the system to maintain manageability through the fixed component while achieving security through the dynamic component, resolving the contradiction between security and manageability.
Solution Approach 2:
The patent embeds the dynamic second identification information within the framework of the fixed first identification information. The second identification information is generated based on the first, creating a nested structure where the dynamic element is contained within the stable framework, enabling both security and manageability to coexist.
2Reliability
If simple random number information is used for identification information, then anonymity is improved, but manageability deteriorates
Solution Approach 1:
The identification information is divided into fixed first identification information (which enables manageability) and dynamic second identification information (which provides anonymity). This segmentation allows the system to achieve both anonymity through the dynamic component and manageability through the fixed component.
Solution Approach 2:
The system changes the parameter of identification information from simple random numbers to a composite structure with fixed and dynamic components. This parameter change enables the system to maintain anonymity while improving manageability through the fixed identification information framework.
3Reliability
If many items of dynamically-changing identification information are used, then privacy protection is improved, but device complexity increases
Solution Approach 1:
The patent segments identification information into exactly two types (first and second identification information) rather than using many dynamic items. This segmentation simplifies the system structure while still providing privacy protection through the dynamic second identification information, resolving the contradiction between privacy protection and system complexity.
Data Source
AI summary
An identification information management system according to the present invention comprises a plurality of terminals communicable with servers and a site management apparatus which manages site containing the terminals. The terminal has an identification information processing unit which assuming that a one-way hash function is f(x) and a terminal-unique ID is a, generates values x satisfying a conditional equation f(x)=a as identification information. When acquiring multiple items of identification information, the site management apparatus substitutes the identification information as the value x into f(x) and decides whether f(x)=a is satisfied, thereby deciding the terminals.