One-Time Scan Code Key Exchange for Secure Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing barcode and QR code technologies are limited to providing information only about products, failing to safely and conveniently facilitate key-exchange-scheme-based encryption using one-time information.
Innovation Solution
A server apparatus and user terminal system that generates and processes one-time scan codes, including a Private Key (PRK) and One Time Key (OTK), to securely transmit one-time Public Key (PBK) via bar codes or QR codes, enabling key-exchange-scheme-based encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing barcode and QR code technologies are used to provide information about products, then the information provision function is simple and easy to implement, but the security and convenience for key-exchange-scheme-based encryption is insufficient
Solution Approach 1:
The patent embeds multiple cryptographic layers within the scan code structure. The scan code contains the one-time public key (PBK), which is derived from the one-time key (OTK) and shared private key (PRK). This nested structure allows the scan code to serve both as information carrier and cryptographic key exchange mechanism, improving security without proportionally increasing complexity.
Solution Approach 2:
The system pre-generates and stores the shared private key (PRK) in the database before use. When a scan code is needed, the system retrieves the PRK and combines it with a randomly generated OTK to create the PBK. This preliminary preparation of cryptographic materials enables secure key exchange while maintaining system simplicity.
2Reliability
If one-time information is transmitted via scan codes for encryption, then secure communication is enabled, but the complexity of generating and managing keys increases
Solution Approach 1:
The patent extracts the complex key management functions from the scan code generation process. The shared private key (PRK) is stored separately in the database, while the scan code only contains the derived one-time public key (PBK). This separation allows secure communication without embedding complex key management logic in the scan code itself.
Solution Approach 2:
The one-time public key (PBK) acts as an intermediary between the shared private key (PRK) and the actual encryption keys. The PBK is generated by combining PRK with a random OTK, serving as a bridge that enables secure communication while isolating the complex key derivation logic from the scan code structure.
3Reliability
If a shared private key is stored in the database for key exchange, then secure encryption is achieved, but the database security requirements increase
Solution Approach 1:
The patent uses disposable one-time keys (OTK) that are generated randomly for each scan code and discarded after use. The shared private key (PRK) is reused across multiple OTKs, creating a hierarchy where the long-lived PRK is protected in the database while the short-lived OTKs provide cryptographic freshness. This approach balances database security requirements with encryption security needs.
Data Source
AI summary
A server apparatus having a one-time scan code issuing function, a user terminal having a one-time scan code recognizing function, and a method for processing a one-time scan code are provided so as to safely and conveniently transmit one-time information used for key-exchange-scheme-based encryption, using a scan code such as a bar code and a QR code.