Method for transferring data, a computer program product, a data provision and a data receiving device and a communication system

• US 20060186200A1
• Filed: 02/02/2006
• Published: 08/24/2006
• Est. Priority Date: 02/04/2005
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Nochta, Zoltan
• Granted Patent: US 8,459,550 B2
• Time in Patent Office: Days
• US Class Current: 235/382
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

A method for transferring data from a data provision device to a data receiving device includes: (a) an initializing operation, comprising: providing an initial authenticity-indicator; providing at the data provision device an initial variable number as a current data-provision-device-variable-number; providing at the data provision device a current data-provision-device-authenticity-indicator, as a function of the current data-provision-device-variable-number and the initial authenticity-indicator, particularly using a one-way-function; setting at the data receiving device the initial authenticity-indicator as a foregoing data-receiving-device-authenticity-indicator; providing at the data receiving device a current data-receiving-device-authenticity-indicator; (b) a provision data provision operation, comprising Determining at the data provision device a data-authenticity-indicator as a function of the provision data, particularly using a one-way-function; Providing at the data receiving device the data-authenticity-indicator and the provision data, as well as a computer program product, data provision device, a data receiving device a communication system.

Claims

1. A method for transferring data from a data provision device to a data receiving device, the method including:

(a) an initializing operation, comprising;

providing an initial authenticity-indicator;

providing at the data provision device an initial variable number as a current data-provision-device-variable-number;

providing at the data provision device a current data-provision-device-authenticity-indicator as a function of the current data-provision-device-variable-number and the initial authenticity-indicator, particularly using a one-way-function;

setting at the data receiving device the initial authenticity-indicator as a foregoing data-receiving-device-authenticity-indicator;

providing at the data receiving device a current data-receiving-device-authenticity-indicator;

(b) a provision data provision operation, comprising

determining at the data provision device a data-authenticity-indicator as a function of the provision data, particularly using a one-way-function;

providing at the data receiving device the data-authenticity-indicator and the provision data.

2. The method according to claim 1, wherein the provision data includes at least one of the following:

message data,

next data-provision-device-authenticity-indicator,

current data-provision-device-variable-number,

data provision device identification data and

data receiving device identification data.

3. The method of claim 1, wherein the provision operation (b) further comprises:

providing at the data provision device a new variable number as the next data-provision-device-variable-number.

4. The method according to claim 3, wherein the provision operation (b) further comprises:

determining at the data provision device a next data-provision-device-authenticity-indicator, as a function of the current data-provision-device-authenticity-indicator and the next data-provision-device-variable-number, particularly using a one-way-function.

5. The method according to claim 4, wherein the operation of providing the provision data at the data receiving device comprises providing the next data-provision-device-authenticity-indicator as a next data-receiving-device-authenticity-indicator and the current data-provision-device-variable-number as a current data-receiving-device-variable-number.

6. The method according to claim 5, wherein the provision operation (b) further comprises:

setting at the data provision device the next data-provision-device-variable-number as the current data-provision-device-variable-number and the next data-provision-device-authenticity-indicator as the current data-provision-device-authenticity-indicator.

7. The method according to claim 1, comprising after the operation (b) of providing the provision data:

(c) a data verification and authentication operation, comprising;

comparing at the data receiving device

the data-authenticity-indicator with a test-data-authenticity-indicator as a function of the provision data, determined at the data receiving device, particularly using a one-way-function and

the current data-receiving-device-authenticity-indicator with a test-authenticity-indicator, determined at the data receiving device, as a function of the foregoing data-receiving-device-authenticity-indicator and the current data-receiving-device-variable-number, particularly using a one-way-function.

8. The method according to claim 7, wherein the operation (c) further comprises:

setting at the data receiving device the current data-receiving-device-authenticity-indicator as the foregoing data-receiving-device-authenticity-indicator and the next data-receiving-device-authenticity-indicator as the current data-receiving-device-authenticity-indicator.

9. The method according to claim 1, wherein the operations (b) and (c) are repeatedly carried out.

10. The method according to claim 9, wherein at each operation (b), new message data can be provided at the data receiving device.

11. The method according to claim 1, wherein the current data-provision-device-authenticity-indicator (PDAI_i) and/or the next data-provision-device-authenticity-indicator (PDAI_i+1) and/or the data-authenticity-indicator (DataAI) and/or the test-data-authenticity-indicator (DataAI_test) and/or the test-authenticity-indicator (AI_test) is/are calculated using a one-way-function (h₁, h₂, h₃, h₄, h₅), in particular at least one:

PDAI_i=h₁(PDVN_i,AI₀),
PDAI_i+1=h₁(PDVN_i+1,PDAI_i)
DataAI=h₂(DataP),
DataAI_test=h₂(DataP) and
AI_test=h₁(RDVN_i,RDAI<sub>i−

1</sub>),

wherein

AI₀ represents the initial-authenticity-indicator,

PDVN_i represents the current data-provision-device-variable-number,

PDVN_i+1 represents the next data-provision-device-variable-number,

DataP represents the provision data,

RDAI<sub>i−

1</sub> represents the foregoing data-receiving-device-authenticity-indicator,

RDVN_i represents the current data-receiving-device-variable-number,

PDAI_i represents the current data-provision-device-authenticity-indicator,

PDAI_i+1 represents the next data-provision-device-authenticity-indicator,

DataAI represents the data-authenticity-indicator,

DataAI_test represents the test-data-authenticity-indicator,

AI_test represents the test-authenticity-indicator and

h₁ and h₂ represent the one way functions.

12. The method according to claim 11, wherein the one way functions are hash functions.

13. The method according to claim 11, wherein the one way functions are chosen from the set of hash functions comprising at least:

SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, MD2, MD4, MD5 and RIPEMD-160, Snefru, Tiger and Whirlpool.

14. The method according to claim 1, wherein the message data comprises computer program code to be carried out by the data-receiving-device.

15. The method according to claim 1, wherein the operation of providing the provision data to the data receiving device includes sending the provision data via radio channel.

16. The method according to claim 1, wherein the data provision device comprises a radio frequency transmitter.

17. The method according to claim 1, wherein the data-receiving-device comprises a radio frequency receiver.

18. A computer program product, in particular stored on a computer-readable storage medium which, when loaded on a data provision device, carries out the method according to claim 1.

19. A data provision device capable of transmitting provision data to a data receiving device comprising:

a variable number generating device;

a data-provision-device-authenticity-indicator generating device for generating a data-provision-device-authenticity-indicator particularly using a one-way-function;

a data-authenticity-indicator generating device for generating a data-authenticity-indicator particularly using a one-way-function; and

a provision data provision device.

20. The data provision device according to claim 19, further comprising a message data provision device capable for providing message data.

21. The data provision device according to claim 19, wherein the provision data provision device comprises a radio frequency emitter.

25. Communication system comprising a data provision device according to claim 19 and a data receiving device according to claim 22.

22. A data receiving device capable of receiving provision data from a data provision device comprising:

a provision data receiving device;

a test-data-authenticity-indicator generating device for generating a test-data-authenticity-indicator particularly using a one-way-function; and

a test-authenticity-indicator generating device for generating a test-authenticity-indicator particularly using a one-way-function.

23. The data receiving device according to claim 22, further comprising a comparing device, adapted to compare:

the data-authenticity-indicator, with the test-data-authenticity-indicator; and

the current data-receiving-device-authenticity-indicator with the test-authenticity-indicator.

24. The data receiving device according to claim 22, wherein the provision data receiving device comprises a radio frequency receiver.