Device and method for protecting data, computer program, computer program product

• US 20100161992A1
• Filed: 12/18/2009
• Published: 06/24/2010
• Est. Priority Date: 12/22/2008
• Status: Abandoned Application

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Schuetze, Torsten, Liebehenschel, Jens
• Application Number:
  US12/641,792
• Publication Number:
  US 20100161992A1
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 12/1466 Key-lock mechanism
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3255 using group based signatures, e.g. ring or threshold signatures

Abstract

A device and method for protecting data in which preset data (m) are stored in a first memory in a control unit; the data (m) are signed with a signature (σ_i) by a subscriber (i) belonging to a group of subscribers (1 . . . n) participating in a signature procedure; the signature is generated as a function of a first key (gsk_i) associated with the subscriber (i); the signature (σ_i) is stored in a second memory in the control unit; before the use of the data (m), a second key is used to verify whether the preset signature (σ_i) was generated by one of the subscribers (i) belonging to the group of subscribers (1 . . . n); and the signature (σ_i) contains an encrypted value, which characterizes the identity of the signing subscriber (i) and is to be decrypted by means of a third key.

Claims

1. A method for protecting data, comprising the steps of storing preset data (m) in a first memory in a control unit;

signing the data (m) with a signature (σ

_i) by a subscriber (i) belonging to a group of subscribers (1 . . . n) participating in a signature procedure;

generating the signature as a function of a first key (gsk_i) associated with the subscriber (i);

storing the signature (σ

_i) in a second memory in the control unit;

before the use of the data (m);

using a second key to verify whether the preset signature (σ

_i) was generated by one of the subscribers (i) belonging to the group of subscribers (1 . . . n); and

providing in the signature (σ

_i) an encrypted value, which characterizes the identity of the signing subscriber (i) and is to be decrypted by means of a third key.

2. The method as recited in claim 1, further comprising carrying the verification out in a computing device in the control unit itself.

3. The method as recited in claim 2, further comprising storing a program, which runs on the computing device in the control unit itself in order to carry out the verification, in a third memory in the control unit that is protected from manipulation.

4. The method as recited in claim 1, further comprising carrying out the verification in a computing device outside of the control unit itself.

5. The method as recited in claim 2, further comprising only using the data (m) in the control unit if the verification of the preset signature (σ

_i) shows that the data (m) were generated by one of the subscribers (i) belonging to the group of subscribers (1 . . . n).

6. The method as recited in claim 1, further comprising determining the signature (σ

_i) on the basis of the data (m) and the first key (gsk_i) while the first key (gsk_i) on the basis of a preset number (n) of subscribers and a preset key length (k).

7. The method as recited in claim 6, further comprising associating each subscriber (i) belonging to a group of subscribers (1 . . . n) with exactly one first key (gsk_i).

8. The method as recited in claim 1, further comprising carrying out the verification of whether the signature (σ

_i) was generated by one of the subscribers (i) belonging to the group of subscribers (1 . . . n) on the basis of a preset second key (gpk).

9. The method as recited in claim 8, further comprising only using the second key (gpk) to verify whether the signature (σ

_i) was generated by one of the subscribers (i) belonging to the group of subscribers (1 . . . n).

10. The method as recited in claim 9, further comprising providing the decryption of the encrypted information contained in the signature (σ

_i) by means of a preset third key (gmsk) on the basis of the data (m) and the signature (σ

_i).

11. The method as recited in claim 6, further comprising providing in the value, which is contained in the signature (σ

_i) and characterizes the identity of the subscriber (i), a piece of information about the first key (gsk_i), the first key (gsk_i) itself, or the subscriber (i) himself.

15. A computer program that executes the steps of a method as recited in claim 1 when it is run on a computing device.

16. A computer program product having programming code, which is stored on a machine-readable medium, for carrying out the method recited in claim 1, when the program is run on a computer or control unit.

12. A device for protecting data, comprising a first memory in a control unit, in which present data (m) are stored;

a first calculating device determines a signature (σ

_i) for signing of the data (m) by a subscriber (i) belonging to a group of subscribers (1 . . . n) participating in a signature procedure;

a first key (gsk_i) associated with the subscriber (i), on the basis of which the signature is generated;

a second memory in the control unit in which the first calculating devices stores the signature (σ

_i), wherein the signature (σ

_i) contains an encrypted value characterizing an identity of the signing subscriber; and

a third key in which the signature (σ

_i) containing an encrypted value which characterizes an identify of the signing subscriber is decrypted.

13. A device for protecting data, comprising a first memory in a control unit, in which preset data (m) are stored;

a second memory in which a preset signature (σ

_i) is stored;

a second calculating device which, before a use of the data, uses a second key to verify whether the preset signature (σ

_i) was generated by a subscriber (i) belonging to a group of subscribers (1 . . . n) and the signature (σ

_i) contains an encrypted value; and

a third key in which the signature (σ

_i) containing an encrypted valued which characterizes an identity of the signing subscriber is decrypted.

14. A device for protecting data, comprising a first memory in a control unit, in which preset data (m) are stored;

a second memory in which a preset signature (σ

_i) containing an encrypted value which characterizes the identity of the signing subscriber (i);

a third key decrypting the preset signature containing the encrypted value which characterizes the identity of the signing subscriber, and a third calculating device using the third key to determine the identify of a signing subscriber.