System and method for data communication protection

• US 10,609,552 B2
• Filed: 08/04/2017
• Issued: 03/31/2020
• Est. Priority Date: 08/05/2016
• Status: Active Grant

• Current Assignee: Tendyron Corporation
• Original Assignee: Tendyron Corporation
• Inventors: Li, Ming
• Primary Examiner(s): Wright, Bryan F
• Application Number:
  US16/314,007
• Publication Number:
  US 20190342751A1
• Time in Patent Office: 970 Days
• Field of Search: 726 7
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06K 7/10366 the interrogation device being adapted for miscellaneous applications
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

The present disclosure provides a data communication method and system. The method includes: a first terminal transmitting first data to a second terminal, and starting timing from a time point when finishing transmitting the first data, the first data at least comprising data to be processed; the second terminal receiving the first data, and starting timing from a time point when finishing receiving the first data; when a value obtained by the second terminal from the timing reaches a preset value, the second terminal transmitting second data to the first terminal, the second data being data obtained by the second terminal performing data processing on the data to be processed; and when a value obtained by the first terminal from the timing is in a valid range of the preset value or reaches the preset value, the first terminal allowing to start receiving the second data.

Claims

1. A data communication system, comprising a first terminal and a second terminal, wherein

the first terminal comprises a first processor and a first memory having a first instruction stored thereon, and the first terminal is configured to transmit first data to the second terminal, and start timing from a time point when finishing transmitting the first data, wherein the first data comprises at least data to be processed;

the second terminal comprises a second processor and a second memory having a second instruction stored thereon, and the second terminal is configured to receive the first data, and start timing from a time point when finishing receiving the first data;

the second terminal is further configured to transmit second data to the first terminal when a value obtained by the second terminal from the timing reaches a preset value, wherein the second data is data obtained after the second terminal performs data processing on the data to be processed;

the first terminal is further configured to allow to start receiving the second data when a value obtained by the first terminal from the timing is within a valid range of the preset value;

the preset value comprises a preset phase difference;

the first terminal keeps generating a carrier signal during the entire process of communication between the first terminal and the second terminal;

Δ

S is a phase change value generated by the carrier signal passing through the maximum communication distance supported by the communication mode adopted between the first terminal and the second terminal;

wherein the value obtained by the first terminal being in the valid range of the preset value comprises a phase difference between a first phase and a second phase of the carrier signal being within the range of [S, S+2Δ

S], in which the first phase is a phase of the carrier signal at a time point when the first terminal finishes transmitting the first data, the second phase is a phase of the carrier signal at a time point when the first terminal allows to start receiving the second data;

the value obtained by the second terminal reaching the preset value comprises a phase difference between a third phase and a fourth phase of the carrier signal reaching the preset phase difference, in which the third phase is a phase of the carrier signal at a time point when the second terminal finishes receiving the first data, the fourth phase is a phase of the carrier signal at a time point when the second terminal starts transmitting the second data.

15. The data communication system according to claim 1, wherein, the valid range of the preset value is [S, S+2Δ

S], in which S is the preset value, and Δ

S is determined by a maximum communication distance supported by a communication mode adopted between the first terminal and the second terminal, and a duration corresponding to S+2Δ

S is less than or equal to a frame waiting time FWT specified in the communication protocol adopted by the first terminal and the second terminal.

16. The data communication system according to claim 1, wherein, the communication mode adopted between the first terminal and the second terminal comprises a short-range wireless communication mode.

17. The data communication system according to claim 1, wherein,

before the first terminal starts timing from the time point when finishing transmitting the first data,

the first terminal and the second terminal are further configured to perform two-way identity authentication, and after passing the two-way identity authentication, negotiate with each other to obtain a transmission key;

the second terminal is further configured to generate the preset value, and encrypt the preset value by using the transmission key, and transmit encrypted preset value to the first terminal, and the first terminal is further configured to decrypt the encrypted preset value by using the transmission key to obtain the preset value, and save the preset value;

or the first terminal is further configured to generate the preset value, and encrypt the preset value by using the transmission key, and transmit the encrypted preset value to the second terminal, and the second terminal is further configured to decrypt the encrypted preset value by using the transmission key to obtain the preset value, and save the preset value;

or,

the first terminal and the second terminal are further configured to perform two-way identity authentication;

after passing the two-way identity authentication, the second terminal is further configured to generate the preset value, and encrypt the preset value by using a public key of the first terminal, and transmit the encrypted preset value to the first terminal, and the first terminal is further configured to decrypt the encrypted preset value by using a private key of the first terminal to obtain the preset value, and save the preset value;

or, after passing the two-way identity authentication, the first terminal is further configured to generate the preset value, and encrypt the preset value by using a public key of the second terminal, and transmit the encrypted preset value to the second terminal, and the second terminal is further configured to decrypt the encrypted preset value by using a private key of the second terminal to obtain the preset value, and save the preset value.

18. The data communication system according to claim 1, wherein,

before the first terminal transmits the first data to the second terminal, the first terminal is further configured to generate the preset value;

the first data at least further comprises the preset value and a tamper-resistant check value calculated based on the preset value;

after the second terminal receives the first data, the second terminal is further configured to acquire the preset value and the tamper-resistant check value from the first data, and verify the tamper-resistant check value, and save the preset value after verification is passed.

19. The data communication system according to claim 1, wherein,

the preset value comprises a preset duration;

Δ

S is the duration required for the first terminal to transmit data to the second terminal when the distance between the first terminal and the second terminal is the maximum communication distance supported by the communication mode adopted by the first terminal and the second terminal;

wherein the value obtained by the first terminal being in the valid range of the preset value comprises the duration obtained by the first terminal after completion of transmitting the first data being within the range of [S, S+2Δ

S];

the value obtained by the second terminal reaching the preset value comprises the duration obtained by the second terminal after completion of receiving the first data reaching the preset duration;

or

the preset value comprises a preset number of cycles;

the first terminal keeps generating a carrier signal during an entire process of communication between the first terminal and the second terminal;

Δ

S is the number of cycles generated by the carrier signal passing through the maximum communication distance supported by the communication mode adopted between the first terminal and the second terminal;

wherein the value obtained by the first terminal being in the valid range of the preset value comprises the number of cycles of the carrier signal continuously transmitted by the first terminal to the second terminal after completion of transmitting the first data being within the range of [S, S+2Δ

S];

the value obtained by the second terminal reaching the preset value comprises the number of cycles of the carrier signal continuously received by the second terminal after completion of receiving the first data reaching the preset number of cycles;

or

the preset value comprises a preset number of pulses;

the first terminal keeps generating a carrier signal during the entire process of communication between the first terminal and the second terminal;

Δ

S is the number of pulses generated by the carrier signal passing through the maximum communication distance supported by the communication mode adopted between the first terminal and the second terminal;

wherein the value obtained by the first terminal being in the valid range of the preset value comprises the number of pulses of the carrier signal continuously transmitted by the first terminal to the second terminal after completion of transmitting the first data being within the range of [S, S+2Δ

S];

the value obtained by the second terminal reaching the preset value comprises the number of pulses of the carrier signal continuously received by the second terminal after completion of receiving the first data reaching the preset number of pulses.

20. The data communication system according to claim 1, wherein, the first terminal is a reading device, and the second terminal is a response device.

2. A data communication method, comprising:

a first terminal transmitting first data to a second terminal, and starting timing from a time point when finishing transmitting the first data, wherein the first data comprises at least data to be processed;

the second terminal receiving the first data, and starting timing from a time point when finishing receiving the first data;

the second terminal transmitting second data to the first terminal when a value obtained by the second terminal from the timing reaches a preset value, wherein the second data is data obtained after the second terminal performs data processing on the data to be processed;

the first terminal allowing to start receiving the second data when a value obtained by the first terminal from the timing reaches the preset value;

the preset value comprises a preset phase difference, the duration corresponding to the preset phase difference being less than or equal to the FWT specified in the communication protocol adopted by the first terminal and the second terminal;

wherein the value obtained by the first terminal reaching the preset value comprises a phase difference between a first phase and a second phase of the carrier signal reaching the preset phase difference, in which the first phase is a phase of the carrier signal at a time point when the first terminal finishes transmitting the first data, the second phase is a phase of the carrier signal at a time point when the first terminal allows to start receiving the second data;

the value obtained by the second terminal reaching the preset value comprises a phase difference between a third phase and a fourth phase of the carrier signal reaching the preset phase difference, in which the third phase is a phase of the carrier signal at a time point when the second terminal finishes receiving the first data, the fourth phase is a phase of the carrier signal at a time point when the second terminal starts transmitting the second data.

3. The method according to claim 2, wherein:

a communication mode adopted between the first terminal and the second terminal comprises a short-range wireless communication mode.

4. The method according to claim 2, wherein,

before the first terminal starts timing from the time point when finishing transmitting the first data, the method further comprises:

the first terminal and the second terminal performing mutual identity authentication, and after passing the mutual identity authentication, the first terminal and the second terminal negotiating with each other to obtain a transmission key;

the second terminal generating the preset value, and encrypting the preset value by using the transmission key, and transmitting encrypted preset value to the first terminal, and the first terminal decrypting the encrypted preset value by using the transmission key to obtain the preset value, and saving the preset value;

or the first terminal generating the preset value, and encrypting the preset value by using the transmission key, and transmitting encrypted preset value to the second terminal, and the second terminal decrypting the encrypted preset value by using the transmission key to obtain the preset value, and saving the preset value;

or,

the first terminal and the second terminal performing mutual identity authentication;

after passing the mutual identity authentication, the second terminal generating the preset value, and encrypting the preset value by using a public key of the first terminal, and transmitting the encrypted preset value to the first terminal, and the first terminal decrypting the encrypted preset value by using a private key of first terminal to obtain the preset value, and saving the preset value;

or, after passing the mutual identity authentication, the first terminal generating the preset value, and encrypting the preset value by using a public key of the second terminal, and transmitting the encrypted preset value to the second terminal, and the second terminal decrypting the encrypted preset value by using a private key of the second terminal to obtain the preset value, and saving the preset value.

5. The method according to claim 2, wherein,

before the first terminal transmits the first data to the second terminal, the method further comprises:

the first terminal generating the preset value;

the first data at least further comprises the preset value and a tamper-resistant check value calculated based on the preset value;

after the second terminal receives the first data, the method further comprises;

the second terminal acquiring the preset value and the tamper-resistant check value from the first data, and verifying the tamper-resistant check value, and saving the preset value after the verification is passed.

6. The method according to claim 2, wherein,

the preset value comprises a preset duration, the preset duration being less than or equal to a frame waiting time FWT specified in the communication protocol adopted by the first terminal and the second terminal;

the value obtained by the first terminal from the timing reaching the preset value comprises a duration obtained by the first terminal from finishing transmitting the first data reaching the preset duration;

the value obtained by the second terminal reaching the preset value comprises a duration obtained by the second terminal from finishing receiving the first data reaching the preset duration.

7. The method according to claim 2, wherein,

the first terminal keeps generating a carrier signal during an entire process of communication between the first terminal and the second terminal;

the preset value comprises a preset number of cycles, a duration corresponding to the preset number of cycles being less than or equal to the FWT specified in the communication protocol adopted by the first terminal and the second terminal;

wherein the value obtained by the first terminal reaching the preset value comprises the number of cycles of the carrier signal continuously transmitted by the first terminal to the second terminal after completion of transmitting the first data reaching the preset number of cycles;

the value obtained by the second terminal reaching the preset value comprises the number of cycles of the carrier signal continuously received by the second terminal after completion of receiving the first data reaching the preset number of cycles;

or

the preset value comprises a preset number of pulses, the duration corresponding to the preset number of pulses being less than or equal to the FWT specified in the communication protocol adopted by the first terminal and the second terminal;

wherein the value obtained by the first terminal reaching the preset value comprises the number of pulses of the carrier signal continuously transmitted by the first terminal to the second terminal after completion of transmitting the first data reaching the preset number of pulses;

the value obtained by the second terminal reaching the preset value comprises the number of pulses of the carrier signal continuously received by the second terminal after completion of receiving the first data reaching the preset number of pulses.

8. A data communication system, comprising a first terminal and a second terminal, wherein

the first terminal comprises a first processor and a first memory having a first instruction stored thereon, and the first terminal is configured to transmit first data to the second terminal, and start timing from a time point when finishing transmitting the first data, wherein the first data comprises at least data to be processed;

the second terminal comprises a second processor and a second memory having a second instruction stored thereon, and the second terminal is configured to receive the first data, and start timing from a time point when finishing receiving the first data;

the second terminal is further configured to transmit second data to the first terminal when a value obtained by the second terminal from the timing reaches a preset value, wherein the second data is data obtained after the second terminal performs data processing on the data to be processed;

the first terminal is further configured to allow to start receiving the second data when a value obtained by the first terminal from the timing reaches the preset value;

the preset value comprises a preset phase difference, the duration corresponding to the preset phase difference being less than or equal to the FWT specified in the communication protocol adopted by the first terminal and the second terminal;

wherein the value obtained by the first terminal reaching the preset value comprises a phase difference between a first phase and a second phase of the carrier signal reaching the preset phase difference, in which the first phase is a phase of the carrier signal at a time point when the first terminal finishes transmitting the first data, the second phase is a phase of the carrier signal at a time point when the first terminal allows to start receiving the second data;

the value obtained by the second terminal reaching the preset value comprises a phase difference between a third phase and a fourth phase of the carrier signal reaching the preset phase difference, in which the third phase is a phase of the carrier signal at a time point when the second terminal finishes receiving the first data, the fourth phase is a phase of the carrier signal at a time point when the second terminal starts transmitting the second data.

9. The data communication system according to claim 8, wherein a communication mode adopted between the first terminal and the second terminal comprises a short-range wireless communication mode.

10. The data communication system according to claim 8, wherein

before the first terminal starts timing from the time point when finishing transmitting the first data,

the first terminal and the second terminal are further configured to perform mutual identity authentication, and after passing the mutual identity authentication, negotiate with each other to obtain a transmission key;

the second terminal is further configured to generate the preset value, and encrypt the preset value by using the transmission key, and transmit encrypted preset value to the first terminal, and the first terminal is further configured to decrypt the encrypted preset value by using the transmission key to obtain the preset value, and save the preset value;

or the first terminal is further configured to generate the preset value, and encrypt the preset value by using the transmission key, and transmit encrypted preset value to the second terminal, and the second terminal is further configured to decrypt the encrypted preset value by using the transmission key to obtain the preset value, and save the preset value;

or,

the first terminal and the second terminal are further configured to perform mutual identity authentication;

after passing the mutual identity authentication, the second terminal is further configured to generate the preset value, and encrypt the preset value by using a public key of the first terminal, and transmit the encrypted preset value to the first terminal, and the first terminal is further configured to decrypt the encrypted preset value by using a private key of first terminal to obtain the preset value, and save the preset value;

or, after passing the mutual identity authentication, the first terminal is further configured to generate the preset value, and encrypt the preset value by using a public key of the second terminal, and transmit the encrypted preset value to the second terminal, and the second terminal is further configured to decrypt the encrypted preset value by using a private key of the second terminal to obtain the preset value, and save the preset value.

11. The data communication system according to claim 8, wherein,

before the first terminal transmits the first data to the second terminal, the first terminal is further configured to generate the preset value;

the first data at least further comprises the preset value and a tamper-resistant check value calculated based on the preset value;

after the second terminal receives the first data, the second terminal is further configured to acquire the preset value and the tamper-resistant check value from the first data, and verify the tamper-resistant check value, and save the preset value after the verification is passed.

12. The data communication system according to claim 8, wherein,

the preset value comprises a preset duration, the preset duration being less than or equal to a frame waiting time FWT specified in the communication protocol adopted by the first terminal and the second terminal;

the value obtained by the first terminal from the timing reaching the preset value comprises a duration obtained by the first terminal from finishing transmitting the first data reaching the preset duration;

the value obtained by the second terminal reaching the preset value comprises a duration obtained by the second terminal from finishing receiving the first data reaching the preset duration.

13. The data communication system according to claim 8, wherein,

the first terminal is further configured to keep generating a carrier signal during an entire process of communication between the first terminal and the second terminal;

the preset value comprises a preset number of cycles, a duration corresponding to the preset number of cycles being less than or equal to the FWT specified in the communication protocol adopted by the first terminal and the second terminal;

wherein the value obtained by the first terminal reaching the preset value comprises the number of cycles of the carrier signal continuously transmitted by the first terminal to the second terminal after completion of transmitting the first data reaching the preset number of cycles;

the value obtained by the second terminal reaching the preset value comprises the number of cycles of the carrier signal continuously received by the second terminal after completion of receiving the first data reaching the preset number of cycles;

or

the preset value comprises a preset number of pulses, the duration corresponding to the preset number of pulses being less than or equal to the FWT specified in the communication protocol adopted by the first terminal and the second terminal;

wherein the value obtained by the first terminal reaching the preset value comprises the number of pulses of the carrier signal continuously transmitted by the first terminal to the second terminal after completion of transmitting the first data reaching the preset number of pulses;

the value obtained by the second terminal reaching the preset value comprises the number of pulses of the carrier signal continuously received by the second terminal after completion of receiving the first data reaching the preset number of pulses.

14. The data communication system according to claim 8, wherein the first terminal is a reading device, and the second terminal is a response device.