Verifiable Data Transfer via Segmented Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In online lotteries, existing systems cannot prevent fraudulent behavior where users can manipulate unscratched fields to win, and there is a risk of hacking or 'man in the middle' attacks, compromising the integrity of the game.
Innovation Solution
A method and system for conducting a verifiable transfer of data over a network, where a secure database generates encrypted data sets with unique identifiers and digital symbols, allowing users to select and reveal fields incrementally, while only transferring the selected data to the user-operated device, and later transferring the decryption key to verify the game's integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If the complete lottery ticket including unscratched digital symbols is transferred to the user, then the user can see all fields, but fraudulent users can access digital symbols beneath unscratched fields before scratching and always scratch fields yielding the highest prize
Solution Approach 1:
The patent divides the lottery ticket data into two separate components: visible fields (initially revealed) and hidden fields (obscured). This segmentation prevents users from accessing all digital symbols at once, thereby maintaining lottery integrity while still providing information to users in a controlled manner.
Solution Approach 2:
The patent implements preliminary obscuring of certain digital symbols before the user interacts with the lottery ticket. By pre-hiding specific fields and only revealing them upon scratching actions, the system prevents fraudulent access to all symbols in advance, ensuring fair play while maintaining user engagement.
2Reliability
If only the digital symbols of scratched fields are transferred to the user, then fraudulent behavior is prevented, but the user cannot verify the complete lottery ticket after communication concludes
Solution Approach 1:
The patent introduces a cryptographic hash function as an intermediary mechanism. The system generates a hash value from the complete lottery ticket data (including hidden fields) and provides this hash to the user. This intermediary allows verification of data integrity without revealing the actual hidden symbols, thus maintaining both fraud prevention and verification capability.
Solution Approach 2:
The patent creates a cryptographic copy (hash) of the complete lottery ticket data that can be shared with users without exposing the actual sensitive information. This cryptographic copy serves as verifiable proof of the original data's integrity while maintaining the security and hidden nature of the unscratched fields.
3Extent of automation
If the secure database is hacked or manipulated such that the user will always lose, then the lottery organizer can control outcomes, but user confidence and safety are compromised
Solution Approach 1:
The patent implements a feedback mechanism where the system provides users with cryptographic verification data (hash values) that allow them to independently verify the integrity of the lottery outcome. This feedback loop restores user confidence by enabling them to confirm that the results have not been manipulated, even though the outcome control remains automated.
Data Source
AI summary
A method of conducting a verifiable transfer of data over a network comprising generating a batch of data sets (18) at a secure database (14), each of the data sets comprising an identifier (22) and an indexed array of digital symbols, and transferring an encrypted version (30) from the secure database to a public database (28). The method, which may be performed in an environment like an on-line lottery, further comprises selecting one of the data sets of the batch and removing the selected data set from the batch and transferring the digital symbol associated with a user-selected index of the indexed array of digital symbols of the selected data set from the secure database to the user-operated device. Finally, the method comprises transferring a decryption key from the secure database to the public database and reproducing the batch of data sets at the public database. This method ensures that a user of a remote device (26) can verify the integrity of the generated data set (18), which was not integrally downloaded initially.