Key Device Display for Verifying Data Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security of key devices is compromised due to potential tampering with data during encryption or signing, as computers with security issues can alter data before it reaches the key device, making it difficult to verify the authenticity of the data being encrypted or signed.
Innovation Solution
A method and system that involves connecting the key device to a computer, authenticating the user, displaying and confirming data on the key device before performing digital signature or encryption, using various input devices such as single buttons or sensors to ensure the data is valid and secure, and generating random authentication codes for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is transmitted from computer to key device for encryption or signing, then the authentication function is achieved, but the security is compromised due to potential data tampering by Trojans on the computer
Solution Approach 1:
The patent applies preliminary action by displaying the data to be signed or encrypted on the key device screen before the actual cryptographic operation. This allows the user to verify the integrity of the data in advance, preventing Trojan-induced tampering from going undetected. The display step serves as a preliminary security check that occurs before the critical encryption or signing operation.
Solution Approach 2:
The patent implements feedback by requiring user confirmation through the input device after displaying the data and before performing the cryptographic operation. This feedback loop ensures that the user actively verifies the data integrity and explicitly approves the operation, creating a security mechanism that prevents unauthorized or tampered data from being processed.
2Reliability
If user confirmation is required through input device, then the security is improved, but the operation complexity increases
Solution Approach 1:
The patent extracts the critical verification function to a dedicated display screen on the key device itself, separate from the computer interface. This allows users to see the actual data being processed directly on the secure device, providing clear visual feedback without complicating the overall operation. The separation of verification (on key device) from data input (on computer) simplifies the user experience while maintaining security.
Data Source
AI summary
The present invention provides a method and a system for improving security of a key device in the information security filed. In order to solve the problem that the security performance of the key device is lower due to the possible tamper of the data needed for encryption and signature in prior art, the present invention provides the method, including steps in which the key device is connected to a computer, then is used to receive the data input by the user through a computer and display the same after a user makes a successful authentication; and to make digital signature or encryption of the data input after the user confirms the content displayed. The above-mentioned system comprises an authentication module, a data receiving module, a display module, a confirmation information receiving module, and a key module. The present invention makes relative display on the key device according to the data input by the user, and provides an input device or generates a random authentication code for confirmation and therefore prevents invalid digital signature or encryption, and improves the security of the key device greatly.