Secure Data Exchange via Annex Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securely exchanging data between data processing units, such as those used in postage metering machines, are complex and require significant computational resources due to the need for hash algorithms or checksums, making them prone to manipulation and errors during data transmission.
Innovation Solution
A method that generates a second message by appending a predetermined annex to the first message and encrypting it with a secret key shared between the units, allowing for secure transmission and simple integrity checks without the need for complex algorithms, ensuring data integrity through encryption and annex verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hash algorithms or checksums are used to verify data integrity during transmission, then data security is improved, but device complexity and computational resource requirements increase
Solution Approach 1:
The patent extracts the verification mechanism from complex hash algorithms to a simple predetermined annex (checksum) that is appended to the data. This annex is calculated using a simple algorithm and transmitted alongside the encrypted data, allowing the receiving unit to verify integrity without requiring complex computational resources or storing large algorithm tables.
Solution Approach 2:
The patent uses a simple, computationally inexpensive checksum algorithm instead of complex hash functions. The checksum is calculated quickly, transmitted with the data, and then discarded after verification. This disposable verification mechanism provides sufficient security without the overhead of maintaining complex cryptographic algorithms in both transmitting and receiving units.
2Reliability
If digital signatures with hash algorithms are used for data verification, then manipulation detection is improved, but computing expenditure increases
Solution Approach 1:
The patent replaces energy-intensive digital signature verification with a simple checksum calculation. The predetermined annex is computed using minimal computational energy, transmitted with the encrypted data, and verified through a straightforward comparison operation. This eliminates the need for both units to perform complex cryptographic operations while maintaining manipulation detection capability.
3Reliability
If complex verification algorithms are implemented in both data processing units, then data security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent extracts the verification function from complex algorithms to a simple predetermined annex that can be easily implemented in both transmitting and receiving units. The annex calculation and verification process is simplified to basic arithmetic operations, making implementation straightforward while maintaining security. The receiving unit simply appends the same predetermined annex to the received data and compares it with the transmitted annex.
Data Source
AI summary
In a method and arrangement for securely exchanging data between a first data processing unit and a second data processing unit, a secure communication channel is established between the first data processing unit and the second data processing unit in a communication configuration step, and a first message is transmitted from the second data processing unit to the first data processing unit via the secure communication channel in a data transmission step. During the data transmission step, the second data processing unit generates a second message by appending a predetermined annex to the first message and a third message by encrypting the second message using a secret key that is available only in the first data processing unit and in the second data processing unit and then transmits the third message to the first data processing unit.