DE102016005348A1 - Method for generating a key value of a data processing system - Google Patents

Abstract

The invention relates to a method for operating a data processing system, providing at least two data computers, wherein both data computers are in data communication with one another or they can establish such with one another, input of operating parameters into at least one data computer for operating the data computer and / or for operating the computer Data processing system, - Addressing at least one data processor by specific input of address data, - Establishment of an HTML-based communication connection between the data computers, wherein after establishing the communication connection data is transferred from one data processor to at least one other data processor, wherein - the two data processor a completely independent and , preferably in data-technically completed, data system, such forms as that the structure of the communication link and operating the communication link between the data computers aussch is based on a data communication of the data processor with each other, and wherein a system state of the data processing system and / or at least one data processor (1) by means of a evaluation unit by exactly one, preferably reproducible, for example, in terms of time dynamically changing number, calculated and / or categorized , wherein the evaluation unit then controls based on this number unlocking a use element.

Description

The present invention relates to a method for generating a key value of a data processing system and to a data processing system according to the respective preambles of claims 1 and 10.

The method described here for operating a data processing system comprises a first step, in which at least two data computers are provided, wherein both data computers are in data communication with one another or they can build one with one another. In this case, a data computer may be any electronic component on which data can be stored and / or processed and / or dispatched.

In a further step, operating parameters are input in at least one data computer for operating the data processor and / or for operating the data processing system.

"Operating parameters" therefore refers to those parameters which, preferably mandatory, are necessary for the definition and operation of the data processing system. It is conceivable, in fact, that the operating parameters are part of an operating and / or programming language system of at least one of the data computers, by means of which an operation of at least one of the data computers can be initiated and / or established.

In a further step, at least one data processor is addressed by specific input of address data. This may mean that the user can specifically target at least one of the data computers by entering, for example, an IP address. In this respect, it is conceivable that one or more of the data computers, in particular by user-specific input of the above-described address data in at least one of the data computer, a specific selection of data computers, which are interconnected to a preferably purely local communication network can be made. In other words, individual data processors can therefore be dialed into such a local (also private) communication network via, for example, such IP addressing.

A local communication network in the sense of the present application can be understood as a personal network (abbreviation: PAN) which can be set up and dismantled ad hoc by small devices such as PDAs or mobile telephones. PANs can therefore be set up using a variety of wired transmission technologies, such as USB or FireWire, or wireless technologies such as IrDA, Bluetooth or WLAN (WPAN). PANs can be used to communicate with each other, but they can also be used to communicate with a larger network (uplink). A Bluetooth created PAN is called Piconet.

However, it is also possible that the local communication network in the sense of the application is a local area network, in short a LAN, a computer network that exceeds the extent of personal area networks. Preferably, the data processing system presented here is different from a master-slave network.

For example, the user may be a technical person skilled in the art. In particular, the user is not a businessman. In addition, the method described here is free of such steps and / or means that enable a business activity. Nevertheless, the user may be an end user.

In a further step, an HTML-based communication connection is established between the data computers, wherein after establishing the communication connection, data is transferred from one data processor to at least one other data processor. "HTML-based communication connection" here means any communication connection which is at least partially constructed according to an HTML standard and / or includes the transmission of such data packets which are at least partially constructed in the form of an HTML data packet or at least partially contain such.

At the same time, the term "HTML-based" defines and / or forms a communication layer within the meaning of the application within which the data packets are moved. This HTML-based communication layer defined in this way is therefore an application-oriented warehouse. For example, the data packets shown in this invention do not leave the communication layers defined by the HTML data packet.

This may in particular mean that the communication connection is free of such data packets which represent a "deeper" programming language or representation in the sense of the OSI standard compared to the HMTL communication layer described above. Basically, therefore, the present invention is also based, inter alia, on the concept that the communication system described here not only has a predefinable selection of well-defined users who are always self-adjustable by the user, but also such a communication system which - after previous specific IP- Addressing by the user - but then very user-friendly as the deepest communication layer using the HTML layer described above.

However, it is or is possible that a storage system according to the OSI standard is implemented by means of the communication system presented here.

The present invention is inter alia also characterized in that a system state of the data processing system and / or at least one data computer is calculated and / or categorized by means of a evaluation unit by exactly one, preferably reproducible, for example, dynamically changing number of times, the evaluation unit then based on this number controls unlocking a use element.

"System state" in this context can designate such an operating state of the data processing system and / or at least one data computer which, preferably unambiguously, particularly preferably one-to-one exactly a physical and / or mathematical and / or temporal size of operating components of the data processing system and / or at least one data computer describes.

The above-mentioned "number" may in particular be a binary number, which stands for at least one of the above-mentioned operating states.

In this context, "dynamically changing" means that a system state is included in the calculation of the number at a point in time of the calculation uniquely assigned to the system state and / or the number is changed or changed in terms of time, specifiable or random, for example, once calculated becomes. Such a change can be carried out by the data processing system, at least one data processor and / or by the evaluation unit.

The utilization element can be a locking of a vehicle or another locking, for example a mobile terminal.

In accordance with at least one embodiment, the two data computers form a completely independent data system, preferably closed in terms of data technology, in such a way that the structure of the communication connection and the operation of the communication connection between the data computers are based exclusively on data communication between the data computers.

In particular, a communication between the individual data computers can thus be constructed particularly independently of one another and be free from external network and / or Internet influences. An external network component is therefore one such component that is not associated with the local network described herein. The assignment can be done via corresponding IP addressing. In other words, the above-described method and thus the data processing system described above is completely decentralized, so that a complete decoupling of the above-described data processing system by a higher-level data processing system (for example, the Internet) is possible, which increases the private security accordingly by the decoupling described above ,

In addition, access and / or access of users can be controlled and monitored particularly simply with regard to the user himself, the location, the time and also generic (for example externally or internally formed) data.

Moreover, it is possible that via the above-described private data processing system, since this has no access to the parent Internet, very large files, such as video files, in particular, for example, by means of an e-mail Exchange program can be interchanged.

Also, address books of input containers, input restoration programs, etc. may be transferred from one of the data computers to the other. Among other things, this is made possible by the fact that at least one of the computers represents a central processing unit which is selected by one or more users (for example via IP addressing) to form a central storage unit on which at least one part, preferably all Data, temporarily or permanently deposited. These data are stored by this central processing unit, but also sent again from this central storage unit, for example in the context of push messages to each decentralized data processor of the private data communication system. However, instead of data transmission based on push messages, pull message data transmission is possible.

In accordance with at least one embodiment, the method for operating a data processing system comprises a first step, in which at least two data computers are provided, wherein both data computers in Data communication with each other or they can build one with each other. In a second step, operating parameters are entered in at least one data computer for operating the data computer and / or for operating the data processing system. In a third step, at least one data computer is addressed by specific input of address data, wherein in a fourth step, an HTML-based communication connection is established between the data computer, wherein after the establishment of the data communication connection, data is transferred from one data processor to at least one other data processor.

The invention is inter alia characterized in that a system state of the data processing system and / or at least one data computer is calculated and / or categorized by means of a evaluation unit by exactly one, preferably reproducible, for example, dynamically changing number of times, the evaluation unit subsequently based on this number controls unlocking a usage element.

In other words, the invention also makes use, inter alia, in at least one embodiment, of storing identification and configuration data in devices (eg, data processors or other electrical or electromechanical devices).

• 1. dass ihnen eine ID (Identifikation) zugeordnet ist oder wird (beispielsweise durch spezifische Eingabe der ID) und Daten zum Authentifizieren mit Peers (andere Vorrichtungen, die die Erfindung enthalten), und/oder
• 2. dass ein Reproduzieren von Daten von Peers (wie basierend auf ID und Authentifizierung zur Verfügung gestellt) durchgeführt wird, und/oder
• 3. die Kontrolle von ausgegebenen Signalen auf Basis dieser Daten durchgeführt wird.

These devices then control bsw. other devices such as lamps (one or many), light switches (one or many), sockets (one or many), etc. thereby

• 1. that they are or will be assigned an ID (for example by specific input of the ID) and data for authentication with peers (other devices incorporating the invention), and / or
• 2. that data is reproduced by peers (as provided based on ID and authentication), and / or
• 3. the control of issued signals is performed on the basis of this data.

In accordance with at least one embodiment, the reproducible number is a number which is determined by the evaluation unit on the basis of at least one further, different, reproducible number.

This may mean that the reproducible number, rather than being calculated, for example, at random, as at least one calculation condition has one or more numbers calculated earlier.

In accordance with at least one embodiment, a communication content and / or a communication step between the two data computers and / or between two data processing systems and / or one further data computer is represented by at least one additional, preferably equally reproducible, additional number. For example, identical communication steps and / or communication contents can then produce precisely mutually different numbers assigned to each other, provided that a previous communication step and / or communication content is different from the current communication step and / or communication content. However, it is also conceivable that two communication steps and / or communication contents then generate the same numbers each time a previous communication step and / or communication content is identical to the current communication step and / or communication content.

This may mean that the number and the additional number are identical to each other.

According to at least one embodiment, the same communication steps generate different numbers if and only if the evaluation unit determines that a, preferably immediately, previously generated communication step is different from a current communication step.

According to at least one embodiment, the evaluation unit calculates at least one, preferably exactly one, key value, this key value being calculated directly from at least one, preferably exactly one, number (in particular one of the numbers described above), and this key value is different from the one assigned to it , preferably uniquely assigned, number. The key value is set up and intended to unlock the usage item.

According to at least one embodiment, the key value is dependent not only on the number assigned to it but also on a system state to a computation time uniquely associated with the system state. It is therefore conceivable that even if equal numbers are assigned or generated by the evaluation unit for the calculation of the key value In addition, a system state at a time in its calculation is crucial. The above system state may be represented by a number or a number sequence or number combination based on which, for example, runtime properties, occupancy states, a communication protocol and / or utilization rates of individual components (for example, the here described data processor) can be clearly deduced.

For example, a key value may be larger or smaller depending on the operating time of at least one of the computing components. In this case, a time-dependent spanned and stored communication history between the individual components can induce the time dependence. Also, the time may be mathematically projected by means of a random number generator, for example.

An idea of the invention is the time and / or time, for example, only indirectly, namely about the change of system states, either by new data or by new data on the communication with another device (for example with a data processor as described here), to be included in the key calculation. In other words, each two computers communicating with each other can have the same "memory" of one, preferably the same, previous communication. This knowledge can then be used to calculate a new key value, which can preferably be checked by both data computers.

In accordance with at least one embodiment, at the time of calculating the key value, the number and / or the further number is known only to the at least one data processor and / or the data processing system and / or another data processor, so that the number and / or the further number is used as an access key for Activation of at least the data processor and / or the data processing system and / or the further data processor is used. This can considerably increase a safety standard, since a corresponding activation key can not be foreseen from the outside and / or can change constantly.

According to at least one embodiment, the data processor and / or another data processor, for example in the form of a, preferably programmable, RFID or NFC chip is formed, wherein one of the data processor with another data processor for generating and / or checking the key value, for example via the Evaluation unit, in data communication occurs with each other, wherein the evaluation unit adjusts whether the data from the computers sent to them or read from them key values are identical, so that the unlocking of the use element, in particular by the evaluation unit and / or by at least one data computer, can take place. For this purpose, a very specific key value, for example stored dynamically in one of the data computers, can be compared with a current key value or a key value generated in the past by the evaluation unit or one of the data processors. If both are identical, the usage element is unlocked.

It is thus preferred that the utilization element is only enabled by the evaluation unit or by one of the data computers if key values stored in at least two of the data computers are identical.

Basically, the present invention offers, practically speaking, the following purely exemplary clearance scenarios:
An electronic key can be used so that z. B. one of these numbers described above, ie one of these state descriptions of one or more devices (computer or entire data system), or the communication between multiple devices, as a basis for the calculation of the key value, that is another number, is used. Key value and number are always different.

Because this key value may depend on the system state at an exact moment in its calculation, and because the system state at the time of computation is known only to the devices involved, and therefore useful only within those devices involved, this key value can be used as a key.

For example, a vehicle may operate a device as described above. One way to unlock the vehicle may then be to present the device with a matching key. The device can then safely open the vehicle.

This device may, for example, be communicatively connected to a further device of the same type on a smartphone. The key value can then be stored for example on an RFID chip, the z. B. is sewn in a T-shirt.

Depending on the setting of the device can then approximation of smartphone and T-shirt, or another or other a z. B. corresponding key generated components carrying the vehicle are unlocked.

Furthermore, the device in the vehicle and / or in the smartphone can recalculate the key at each communication step, and store it in the RFID chip in the T-shirt, so that after leaving the vehicle another, new key is valid. So reading the key is worthless, because he only once, and z. B. only in conjunction with another key, z. B. another RFID chip z. B. in the car owner's shoe, can be valid and effective.

Another example scenario for the use of the invention is the identification of customers in salesrooms.

So far, shops evaluate their self-stored in RFID chips key, and can, for example, the nature of the so marked clothing, but also z. B. a sales history of the customer, the z. For example, if you have bought exactly one particular T-shirt before, you can determine it.

The invention allows the customer this identifiability itself and only at their own request to produce - or not. Because the key is constantly, d. H. z. B. with each communication step between z. As RFID chip, reader, and calculation unit, can also no tracking of a customer z. B. across different stores away. The customer himself has the device described above and can understand at any time, which data points, eg. B. from his past, and present this at will. B. with a seller or shop operator. In accordance with at least one embodiment, the communication connection between the individual data computers is completely free from a communication connection arranged outside the data system towards the data processing system.

This means that the data processing system described above can be in particular one that is completely decoupled from an external network.

In accordance with at least one embodiment, by means of a separate input element and / or by means of an input element installed in one or more of the data computers, at least one data record is transferred from one data computer to the other data computer or vice versa. Alternatively, such a data transfer may be free of the separate input in such an input element, so that a data transmission, for example, after prior adjustment, can be fully automatic to at least one of the data computer.

Namely, it is conceivable in this context that such a separate input element may be, for example, a display of a mobile telephone or a light switch or other mechanical, electrical or electromechanical element which generates a data set which is directly related to a data processor assigned to this input element, preferably one-to-one is forwarded. In a computer of the data processor, this data set generated by the separate input element is then converted into such a data record or data packet which is at least partially HTML-based and also the structured mark-ups compatible with the HTML-based language elements. contains. This then modified data packet is forwarded again from the temporary memory of the data processor to this computer, which then forwards this modified data packet (HTML-based data packet), for example in the form of a push message, to at least one further data processor.

In particular, it is conceivable that in this context, a chain reaction vonstattengeht, so that this additional data this, for example, modified data packet or by a purely exemplary further modification of this further data pact just this even further modified data packet to an additional data or any other computer data, which the training private communication system, is forwarded. Therefore, one of the data records can be displayed on a further separate input element and / or separate output element of one of the data computers, or an output element of a data computer, which is different from the input element of a data computer, can be controlled or regulated by means of this at least once modified data record.

The term "modification" can either be a partial or complete change of the data set, for example with regard to its data record architecture, or "modification" merely means that the data record or the data remains unchanged and passes through this unchanged data record each and one of the data processor internal indexes and / or context files, for example, for identification purposes, attached and / or vorschaltet. In this respect, it is conceivable that the HTML files generated by a data computer remain identical throughout the system and can only be supplemented by the internal indexes and / or context files.

According to at least one embodiment, all data packets for operating and setting up the communication connection are stored exclusively in at least one of the data computers.

In this respect, it is conceivable that at least one, for example, exactly one data computer (central data computer) within the data processing system is a data memory of the data processing system, preferably all data packets from the data processors (peripheral data computer) sent to this data processor and managed and / or stored by these data computers.

A central data processor selected by a user, for example by IP control, therefore constitutes a server of the private data processing system described above.

In accordance with at least one embodiment, the data packets are exchanged on the basis of an e-mail exchange system under the data processors. In this respect, the internal data processing system implements an internal e-mail communication system. For example, the internal e-mail communication system is based on Internet-based standards. As noted, such standards may include the structured mark-ups (microdata, micro-formats, RBFA, etc.) as well as the standards related to hash functions in a memory.

According to at least one embodiment, recovery of data of a peripheral data processor is performed by retrieving the data stored in the central data processor.

This ensures that even within the local data communication system no data can be lost and a recovery is completely free of external network interfaces.

According to at least one embodiment, a facial recognition is performed by means of a face recognition element of the data processing system, whereby the face recognition recognizes by the face recognition element or by the data computers whether the scanned face pattern corresponds to one of the face patterns stored in at least one of the data computers. In this respect, a particularly effective access and subscriber control can be implemented via at least one of the data computers of the data communication system.

In accordance with at least one embodiment of the method, at least one data processor is a mobile user terminal, such as a mobile user terminal. B. a mobile smartphone.

The advantages of the above-described local and therefore private data processing system can therefore be realized in particular by designing the individual data computers in the form of the mobile user terminals described above.

Moreover, the present invention relates to a data processing system, in particular such a data processing system, which is set up and provided for carrying out the method described above.

In this respect, the data processing system described here comprises at least two data computers, wherein both data computers are in data communication with one another or preferably such data communication can be established only between and by both data computers.

Among other things, the data processing system described here is characterized in that a system state of the data processing system and / or at least one data processor is calculated and / or categorized by means of a evaluation unit by exactly one, preferably reproducible, for example, dynamically changing number of times, the Evaluation unit then based on this number controls unlocking a use element.

In this case, the data processing system described here 100 the same advantages and individual embodiments as described in connection with the method described above on.

That is, the features and configurations disclosed for the method described above are also disclosed for the data processing system described herein, and vice versa.

In the following the invention will be described in more detail with reference to an embodiment and the associated figure.

1 therefore shows a communication method devised in accordance with the present invention. In the figure, identical or equivalent components are each provided with the same reference numerals.

Like from the 1 and its procedure 1000 can be detected includes the method described there 100 for generating a key value of a data processing system 100 three data computers 1 , where all three data processors 1 in data communication with each other. A first data processor 1 is a mobile device 10A , a second data processor 1 is a calculator 10B in a usage element 300 in a vehicle to be unlocked, for example, and a third computer 1 is an RFID chip 10C , The third data processor 100 can be understood as the further data processor in the sense of the invention. Of course, even more data processors come into question, which work in the same way as the mobile terminal described above 10A can work. Also are correspondingly more RFID chips 10C possible.

Having appropriate operating parameters in at least one of the data computers 1 were entered and the data calculator 1 are addressed by the user, is a, preferably only, HTML-based communication connection between the individual data computers 1 built up.

In this case, a system state of the data processing system and / or at least one data computer 1 by means of a evaluation unit 200 is calculated and / or categorized by exactly one, preferably reproducible, for example, dynamically changing number of times, the evaluation unit 200 then, based on this number unlocking a use element 300 controls. The evaluation unit 200 can be in one of the data calculator 1 or in the usage element 300 be installed.

In particular, in the 1 also shown that the device 10A along the time axis 2000 and depending on the time again and new numbers, preferably different from each other, for example, depending on one between the data computers 1 in the past and / or currently exchanged communication content and / or a communication step, obtained from these numbers produced key values X1 ... XN and / or awards.

At the same time, from the RFID chip 100 another key value, for example by means of the evaluation unit 200 be read out. The further key value may also change along the time axis. For example, in the RFID chip 100 at a predetermined time exactly one key value XN fed, which also with the key value of the mobile terminal 10A should be identical. As the key value XN changes constantly over time, it becomes on the RFID chip 100 just a single key key value XN through the mobile device 10A and / or the evaluation unit 200 played or generated. Thus, in terms of time, there will always be another matching key value to the RFID chip 100 forgive. The key value XN is thus both on the mobile terminal 10A as well as on the RFID chip 100 deposited.

If, for example, a user returns to his locked vehicle, it is conceivable that the locking system (for example, one of the data computers 1 ) only then opens its locks, provided that on the RFID chip 100 with the one from the mobile device 10A , at that time, key-value generated is identical.

One-time reading of the key value from the RFID chip 100 Unauthorized third parties can therefore not lead to an opening of the locks, since the correct key value changes again and again.

For example, it is conceivable that the evaluation unit 200 recognizes that matching has taken place based on an assigned key, so that from the mobile terminal 10A along the time axis 2000 another, from the previous generated key value different key value, assigned and to the RFID chip 10C is passed on. Such a dynamically generated key value therefore ensures that unauthorized third parties never have the correct key value for opening the vehicle locks.

For example, the data processing system proposed here has a plurality of mobile terminals 10A on, it is conceivable that a key value XN uniquely assigned to this mobile terminal is calculated by each of the mobile terminals. For example, this key value XN is accepted by the evaluation unit only if it is present on all mobile terminals 10A is equal to. A key value synchronization would thus be generated.

Conversely, however, it is also conceivable that each of the mobile terminals 10A different key values XN generated and for example by means of the evaluation unit or by one or more of the mobile terminals 10A an overall key value is calculated, which has as a basis for calculation all or part of the different key values XN. For this purpose, the individual key values XN can be calculated by means of a mathematical algorithm to the total key value.

The invention is not limited to the description and the embodiment, but the invention includes any novel feature and any combination of features, including in particular any combination of claims, even if this feature or combination itself is not explicitly in the claims or in the Embodiment disclosed.

LIST OF REFERENCE NUMBERS

XN

key value

1

data computer

10A

(End) device

10B

computer

100

RFID chip

100

Data processing system

200

evaluation unit

300

use element

1000

method

2000

timeline

Claims (10)

Procedure ( 1000 ) for generating a key value of a data processing system ( 100 ), - providing at least two data computers ( 1 ), whereby both data computers ( 1 ) are in data communication with each other or they can build one another with one another, - input of operating parameters into at least one data computer ( 1 ) for operating the data computer ( 1 ) and / or for operating the data processing system ( 100 ), - Addressing at least one data processor ( 1 ) by specific input of address data, - establishment of an HTML-based communication connection between the data computers ( 1 ), after establishing the communication connection data from a data processor ( 1 ) on at least one other data processor ( 1 ), characterized in that - a system state of the data processing system and / or at least one data processor ( 1 ) by means of a evaluation unit ( 200 ) is calculated and / or categorized by exactly one, preferably reproducible, for example, dynamically changing number of times, the evaluation unit ( 200 ) then based on this number unlocking a use element ( 300 ) controls. Procedure ( 1000 ) according to claim 1, characterized in that the reproducible number is such a number, which is determined on the basis of at least one further, different reproducible number, by the evaluation unit. Procedure ( 1000 ) according to claim 1 or 2, characterized in that the one communication content and / or a communication step between the two data processors ( 1 ) and / or one of two data processing systems ( 100 ) and / or another data computer by at least one, preferably also reproducible, further number is represented. Procedure ( 1000 ) according to the preceding claim, characterized in that the same communication steps generate different numbers if and only if the evaluation unit ( 200 ) is determined that a, preferably immediately, previously generated communication step is different from a current communication step. Procedure ( 1000 ) according to the preceding claim, characterized in that by the evaluation unit ( 200 ) at least one, preferably exactly one, key value (XN) is calculated, this key value (XN) being calculated directly from at least one, preferably exactly one, number and this key value (XN) being different from its assigned, preferably uniquely assigned, Number is. Procedure ( 1000 ) according to the preceding claim, characterized in that the key value (XN) is dependent not only on the number assigned to it, but also on a system state to a calculation time uniquely assigned to the system state. Procedure ( 1000 ) according to the preceding claim, characterized in that at the time of calculating the key value (XN) the number and / or the further number only at least one of the data processor and / or the data processing system ( 100 ), so that the number and / or the further number is used as an access key for enabling at least the data computer ( 1 ) and / or data processing system ( 100 ) serves. Procedure ( 1000 ) according to the preceding claim, characterized in that the data processor ( 1 ) and / or another data processor ( 1 ), for example in the form of a preferably programmable RFID or NFC chip, one of the data computers ( 1 ) with another data processor ( 1 ) for generating and / or checking the key value (XN), for example via the evaluation unit ( 200 ), enters data communication, the evaluation unit ( 200 ) matches whether from the data computers ( 1 ) are identical to key values (XN) sent to them or read from them, so that the unlocking of the utilization element ( 300 ), in particular by the evaluation unit ( 200 ) and / or by at least one data processor ( 1 ), can be done. Procedure ( 1000 ) according to the preceding claim, characterized in that the utilization element ( 300 ) is a locking system, in particular a vehicle, is. Data processing system ( 100 ), comprising - at least two data computers ( 1 ), whereby both data computers ( 1 ) are in data communication with one another or, preferably only, between and by both data computers ( 1 ) such is buildable, characterized in that a system state of the data processing system ( 100 ) and / or at least one data processor ( 1 ) by means of a evaluation unit ( 200 ) is calculated and / or categorized by exactly one, preferably reproducible, for example, dynamically changing number of times, the evaluation unit ( 200 ) then based on this number unlocking a use element ( 300 ) controls.

Images