SYSTEM AND METHOD FOR COMMUNICATING BETWEEN DIFFERENT ENTITIES USING DIFFERENT DATA PORTIONS FOR DIFFERENT CHANNELS

• US 20130019096A1
• Filed: 09/18/2012
• Published: 01/17/2013
• Est. Priority Date: 03/19/2010
• Status: Abandoned Application

• Current Assignee: Mrqr10 GmbH & Company KG (net group Beteiligungsgesellschaft mbH)
• Original Assignee: Mrqr10 GmbH & Company KG (net group Beteiligungsgesellschaft mbH)
• Inventors: Geldermann, Martin, Hirasawa, Shinji, Stals, Luc, Palzer, Martin
• Application Number:
  US13/622,085
• Publication Number:
  US 20130019096A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A first entity for communicating with a second entity and a third entity includes a data subdivider for subdividing a data entity into a first data portion and a second data portion. The data portions are processed by an output interface for transmitting a first message to the third entity and the second message to the second entity. In the third entity, the data portion directly received from the first entity and the other data portion received via the second entity are reassembled.

Claims

1. A first entity for communicating with a second entity and a third entity, comprising:

a data subdivider for subdividing a data entity into at least a first data portion and a second data portion;

an output interface for transmitting a first message to the third entity, the first message comprising the first data portion and not comprising the second data portion, and for outputting a second message for reception by the second entity, the second message comprising the second data portion, wherein the second message does not comprise the first data portion, wherein the output interface is configured for transmitting the first message via a first transmission channel, for transmitting the second message via a second transmission channel, wherein the transmission capacity of the second transmission channel is lower than the transmission capacity of the first transmission channel,

wherein the data subdivider is configured for subdividing the data entity such that a data amount in the first data portion is higher than a data amount in the second data portion, and

wherein the data subdivider is configured for subdividing the data entity in a manner known to the third entity, or wherein the data subdivider is configured for generating subdivision information indicating the way of subdividing the data entity and the first message or the second message comprises the subdivision information or wherein the output interface is configured for transmitting a further message comprising the subdivision information to the third entity.

2. The first entity in accordance with claim 1, in which the data entity is a data file or a key.

3. The first entity in accordance with claim 1, in which the output interface is configured for displaying the second message as a two-dimensional optical code on a display.

4. The first entity in accordance with claim 1, in which the data entity is a key,

in which the first entity comprises an encrypter for encrypting a data message using the key to acquire an encrypted message, and

in which the output interface is configured for generating the first message using the encrypted message and only a first portion of the key as the first data portion or for generating the second message using the encrypted message and only a second portion of the key as the second data portion, wherein the second portion of the key is different from the first portion of the key.

5. The first entity in accordance with claim 1, in which the data entity is a key, wherein the first entity further comprises an encrypter, wherein the encrypter is configured for encrypting one key portion using the other key portion.

6. The first entity in accordance with claim 1, in which the data subdivider is configured for subdividing the data entity such that the first data portion comprises ten times or more the data amount of the second data portion.

7. The first entity in accordance with claim 1, further comprising an encrypter for encrypting a data file using an encryption information allowing a decryption at the third entity and not allowing a decryption at the second entity to acquire an encrypted data file, the encrypted data file being the data entity.

8. The first entity in accordance with claim 1, in which the data subdivider is configured for scrambling or encrypting bytes of the data entity selected for the second data portion using scrambling or encrypting information allowing a descrambling or decryption in the third entity and not allowing a descrambling or decryption in the second entity.

9. The first entity in accordance with claim 1, further comprising a key generator for locally generating a key as the data entity.

10. The first entity in accordance with claim 1, in which the data entity comprises an encrypted or non encrypted data file,

in which the data subdivider is configured for subdividing the data entity into at least three data portions, wherein the output interface is configured for transmitting the first message comprising the first portion to the third entity, to output the second message comprising the second data portion to the second entity, and to output a third message comprising the third data portion and not comprising the second portion and the first portion to a fourth entity.

11. A method of communicating with a second entity and a third entity by a first entity, comprising:

subdividing a data entity into at least a first data portion and a second data portion;

transmitting a first message to the third entity, the first message comprising the first data portion and not comprising the second data portion, and outputting a second message for reception by the second entity, the second message comprising the second data portion, wherein the second message does not comprise the first data portion,

wherein the first message is transmitted via a first transmission channel, wherein the second message is transmitted via a second transmission channel, wherein the transmission capacity of the second transmission channel is lower than the transmission capacity of the first transmission channel,

wherein the subdividing is performed such that a data amount in the first data portion is higher than a data amount in the second data portion,

wherein the subdividing the data entity is performed in a manner known to the third entity, or wherein subdivision information indicating the way of subdividing the data entity is generated and the first message or the second message is provided with the subdivision information or wherein a further message comprising the subdivision information is transmitted.

12. A third entity for communicating with a first entity and a second entity, comprising:

an input interface for receiving a first message from the first entity, the first message comprising a first data portion of a data entity, and for receiving a second message from the second entity, the second message comprising a second data portion of the data entity;

a message processor for processing the first message and the second message to acquire the first portion of the data entity and the second portion of the data entity; and

a data assembler for assembling the first portion and the second portion to acquire the data entity, wherein the data assembler is configured for using a predefined assembly rule or using an assembly information received,

wherein the data entity is a key,

wherein the first message comprises a data block encrypted with the key and the first portion of the key,

wherein the second message comprises a data block encrypted with the key and the second portion of the key, and

wherein the third entity furthermore comprises a data entity processor for decrypting the encrypted data blocks using the key output by the data assembler to acquire a decrypted data block for each message and for matching the decrypted data blocks so that a transaction is triggered when the decrypted data blocks match or a transaction is not triggered when the decrypted data blocks do not match.

13. The third entity in accordance with claim 12, in which the first message and the second message each comprise the data block in an encrypted form using key information associated with the first entity and the third entity.

14. The third entity in accordance with claim 12, further comprising an authorizer for requesting a personal identification from the second entity in response to a receipt of the second message, for validating the personal identification from the second entity, and for controlling the data assembler to assemble in response to a positively validated personal identification and to not assemble in response to a negatively validated personal identification.

15. The third entity in accordance with claim 12, further comprising an authorizer for transmitting a user name of the second entity registered with respect to the third entity to the second entity.

16. The third entity in accordance with claim 12, wherein the data entity is subdivided in at least three portions, wherein the input interface is configured for requesting a personal identification from the second entity and from a fourth entity subsequent or before receiving a message from the respective entity and for controlling the data assembler or the message processor to proceed with assembling or message processing in case of a positively validated authorization based on the personal identification from the second entity and the fourth entity.

17. The third entity in accordance with claim 12, in which the data entity is an encrypted file, and in which the third entity furthermore comprises a data decrypter for decrypting the encrypted file output by the data assembler using a key information matching with a key information used by the first entity for encrypting the data entity.

18. The third entity in accordance with claim 12, in which the data entity is a non-encrypted file, and

in which the third entity furthermore comprises a data processor for reading the file output by the data assembler and for controlling an action depending on the read file.

19. The third entity in accordance with claim 12, in which the data entity is a key, and wherein a further data entity comprising an encrypted file is comprised, in portions, by the first and second messages,

wherein the first message comprises a first portion of the key and the first portion of the data file and does not comprise a second portion of the key and a second portion of the data file,

wherein the second message comprises a second portion of the key and a second portion of the data file and does not comprise a first portion of the key and a first portion of the data file,

wherein the data assembler is configured for assembling the encrypted file and the key, wherein the third entity furthermore comprises a data decrypter for decrypting the encrypted data file using the key.

20. The third entity in accordance with claim 12,

in which the data assembler comprises a data record comprising a plurality of different data assembly rules,

wherein the first message, the second message or a separate message comprises an assembly rule indicator indicating a selected assembly rule from the plurality of different data assembly rules to be used for assembling the data entity by the data assembler.

21. A method of communicating with a first entity and a second entity using a third entity, comprising:

receiving a first message from the first entity, the first message comprising a first data portion of a data entity, and receiving a second message from the second entity, the second message comprising a second data portion of the data entity;

processing the first message and the second message to acquire the first portion of the data entity and the second portion of the data entity; and

assembling the first portion and the second portion to acquire the data entity, wherein a predefined assembly rule is used or wherein an assembly information is received,

wherein the data entity is a key,

wherein the first message comprises a data block encrypted with the key and the first portion of the key,

wherein the second message comprises a data block encrypted with the key and the second portion of the key, and

wherein the method furthermore comprises decrypting the encrypted data blocks using the key output by the data assembler to acquire a decrypted data block for each message and matching the decrypted data blocks, wherein a transaction is triggered when the decrypted data blocks match or a transaction is not triggered when the decrypted data blocks do not match.

22. A second entity for communicating with a first entity and a third entity, comprising:

an input interface for acquiring an input message;

an output interface for transmitting an output message to the third entity;

processor for generating the output message based on the input message; and

an authorizer adapted to receive a personal identification request from the third entity before or in response to transmitting the output message to the third entity, and to send personal identification information input by a user to the third entity.

23. The second entity in accordance with claim 22, wherein the second entity is a mobile phone, wherein the input message is an optical two-dimensional code generated by the first entity, wherein the processor is adapted for decoding the QR code and to introduce information extracted from the QR code into the output message.

24. The second entity in accordance with claim 22, wherein the authorizer is configured for receiving a user name for the second entity registered at the third entity together with the personal identification request.

25. The second entity in accordance with claim 22,

wherein the input message comprises a key and an encrypted or non-encrypted data entity portion, and

wherein the processor is configured for extracting the key and for encrypting the data entity portion to acquire the output message.

26. The second entity in accordance with claim 22,

wherein the processor is configured for extracting data from the input message, wherein the data from the input message comprises a first data portion of a data entity, wherein the processor has stored a second portion of the data entity, and wherein the processor is configured for generating the output message so that the output message comprises the first data portion extracted from the input message and the stored second data portion.

27. A method of communicating with a first entity and a third entity, using a second entity, comprising:

acquiring an input message;

transmitting an output message to the third entity;

generating the output message based on the input message; and

receiving a personal identification request from the third entity before or in response to transmitting the output message to the third entity, and

sending personal identification information input by a user of the second entity to the third entity.

28. A non-transitory computer readable medium including a computer program comprising a program code for performing, when running on a computer, a method of communicating with a second entity and a third entity by a first entity, said method comprising:

subdividing a data entity into at least a first data portion and a second data portion;

transmitting a first message to the third entity, the first message comprising the first data portion and not comprising the second data portion, and outputting a second message for reception by the second entity, the second message comprising the second data portion, wherein the second message does not comprise the first data portion,

wherein the first message is transmitted via a first transmission channel, wherein the second message is transmitted via a second transmission channel, wherein the transmission capacity of the second transmission channel is lower than the transmission capacity of the first transmission channel,

wherein the subdividing is performed such that a data amount in the first data portion is higher than a data amount in the second data portion,

wherein the subdividing the data entity is performed in a manner known to the third entity, or wherein subdivision information indicating the way of subdividing the data entity is generated and the first message or the second message is provided with the subdivision information or wherein a further message comprising the subdivision information is transmitted.

29. A non-transitory computer readable medium including a computer program comprising a program code for performing, when running on a computer, a method of communicating with a first entity and a second entity using a third entity, said method comprising:

receiving a first message from the first entity, the first message comprising a first data portion of a data entity, and receiving a second message from the second entity, the second message comprising a second data portion of the data entity;

processing the first message and the second message to acquire the first portion of the data entity and the second portion of the data entity; and

assembling the first portion and the second portion to acquire the data entity, wherein a predefined assembly rule is used or wherein an assembly information is received,

wherein the data entity is a key,

wherein the first message comprises a data block encrypted with the key and the first portion of the key,

wherein the second message comprises a data block encrypted with the key and the second portion of the key, and

wherein the method furthermore comprises decrypting the encrypted data blocks using the key output by the data assembler to acquire a decrypted data block for each message and matching the decrypted data blocks, wherein a transaction is triggered when the decrypted data blocks match or a transaction is not triggered when the decrypted data blocks do not match.

30. A non-transitory computer readable medium including a computer program comprising a program code for performing, when running on a computer, a method of communicating with a first entity and a third entity, using a second entity, said method comprising:

acquiring an input message;

transmitting an output message to the third entity;

generating the output message based on the input message; and

receiving a personal identification request from the third entity before or in response to transmitting the output message to the third entity, and

sending personal identification information input by a user of the second entity to the third entity.