METHOD FOR THE ENCRYPTION OF DATA

• US 20140372760A1
• Filed: 06/10/2014
• Published: 12/18/2014
• Est. Priority Date: 06/12/2013
• Status: Active Grant

• Current Assignee: Appbyyou GmbH
• Original Assignee: Appbyyou GmbH
• Inventors: TEUFEL, Thomas, FLEDRICH, Stefan
• Granted Patent: US 9,525,674 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

To improve known encryption methods for communication in non-secured wireless networks, the invention proposes using an active key for encryption, in each instance, and sending along a new key in the messages, in each instance, which key, after it has been received completely, becomes the key used, and, once again, another new key is exchanged. This allows dynamic encryption, which allows an interception-proof connection, starting from a secure initial exchange of keys, for example.

Claims

1. Method for the encryption of data within the scope of a data transmission between two nodes of a communication network, in which a message (6) to be sent between the two nodes is encrypted in the transmission node, using an active key (3), and transmitted to the reception node, and decrypted there using the active key (3),

wherein the message, aside from a header (8) and a user data part (10), also has an encryption data part (9) in which data of a new key (4) are sent, and, after complete sending and reception of the new key (4), both nodes replace the active key (3) with the new key (4) for further communication.

2. Method according to claim 1, wherein a first key exchange between the two nodes takes place by way of near field communication.

3. Method according to claim 2, wherein for the first key exchange, a first node codes the first key as a barcode and represents it by way of output means, and the second node scans the barcode by way of input means.

4. Method according to claim 2, wherein the near field communication takes place by way of an ad hoc wireless connection with a short range.

5. Method according to claim 1, wherein the encryption of the message (6), using the active key (3), takes place by means of setting the character values of the active key (3) off against the character values of the non-encrypted message (6), in accordance with a predetermined function, and wherein the decryption of the message (6) takes place by means of setting the character values of the active key (3) off against the character values of the encrypted message (6), in accordance with a reversal function of the predetermined function.

6. Method according to claim 5, wherein in the event that the message (6) is longer than the active key (3), the numerical character values of the active key (3) are iterated.

7. Method according to claim 5, wherein the message (6) contains a character value that is not encrypted and that indicates an offset (7) of the active key (3) at which the encryption is started.

8. Method according to claim 1, wherein a fallback key (5) is exchanged between the two communicating nodes, which key is regularly used as a fallback in the event that the connection is lost.

9. Method according to claim 1, wherein the active keys (3) used and the new key (4) consist of randomly selected chains of characters.

10. Method according to claim 1, wherein the active keys (3) used and new keys (4) are formed in different lengths.