EP1245094A2

EP1245094A2 - Device for the password-protected handling of an electronic document

Info

Publication number: EP1245094A2
Application number: EP00991268A
Authority: EP
Inventors: Erland Wittkötter
Original assignee: BRAINSHIELD TM TECHNOLOGIES Inc; Wittkotter Erland
Current assignee: WITTKOETTER, ERLAND
Priority date: 1999-12-23
Filing date: 2000-12-27
Publication date: 2002-10-02
Also published as: US20050076247A1; WO2001047175A2; DE19962902A1; WO2001047175A3

Abstract

The invention relates to a device for the password-protected access to a functional unit. The inventive device comprises a password input unit (20), and a password checking unit connected downstream of the password input unit (20) and configured to activate the functional unit to have a predetermined first functional operation when a correctly input password is detected. The first functional operation corresponds to an operation that is in accordance with the requirements and that is intended by the user. The password checking unit is linked with a password generating unit that is adapted to generate a first password as the correct password. Said password generating unit is further adapted to generate at least one second password. The password checking unit is adapted to initiate a second predetermined functional operation of the functional unit in response to the recognition of the second password. The second functional operation is a mode of operation that is different from an explicit error message or error routine and that is different from the first functional operation and does not correspond to the operation intended by the user.

Description

DESCRIPTION

Device for passport-protected handling of an electronic document

The present invention relates to a device according to the preamble of claims 1 and 6 and a corresponding method. This technology is known in the form of an encryption system and usually consists of an encryption unit for producing an encrypted document and thus secured against unauthorized access, as well as a decryption unit or password checking unit that prompts for input or electrical merging with the correct key restores the original, open document.

There are numerous procedures in the prior art for achieving such electronic encryption in the form of encryption algorithms, encryption methods, etc.

However, it is common to all of these procedures from the prior art that a key is typically suitable for the correct decryption and thus for the usability of the encrypted content, while any input of a keyword that does not match the correct key is intended to be equivalent in this respect can also be viewed as a key file) leads to an unusable result and this is also immediately recognizable for the respective user. In other words, known decryption devices or encryption processes are unambiguously and immediately recognizable with regard to the success or failure of a decryption.

However, in some applications, this may be disadvantageous or unlawful If he / she receives a wrong output as the result of the decryption by entering a chosen final key, cause him to continue trying to decrypt until he has actually received the desired - correct - result of the decryption. Especially when, due to a lack of additional security measures or due to the abilities of the unauthorized accesser (who will also be referred to as hacker in the following), the possibilities exist that a large number of decryption attempts can be carried out with correspondingly varied specified keys, known encryption methods suffer from a lack of security. This applies above all to automated, so-called password cracking programs, which generate and check a wide range of possible keys with the help of electronic directories (e.g. word, address or telephone books).

The object of the present invention is to overcome this lack of security and to improve the security of existing encryption devices and encryption methods. In particular, the aim of the present invention is to prevent a hacker from attempting any number of access attempts until the true, open content of the document to be protected is ultimately available to him.

The object is achieved by the device having the features of claim 1, claim 6 and corresponding methods; advantageous developments of the invention are described in the subclaims. Independent protection within the scope of the invention is also for use regarding access or Log-in procedure used, such as could be useful when starting the operating system or when calling up user (text or similar) files. In an advantageous manner according to the invention, the invention achieves an uncertainty effect on the part of an illegally accessing (unauthorized) user, namely in that an improper entry of a password leads to a reaction of the functional unit and, typically, this reaction by the unauthorized user as an intended reaction (function) is recognized. Accordingly, he will then stop further unauthorized access attempts.

In a typical embodiment of the invention, which corresponds to the best known embodiment (best mode), the present invention relates to password-protected access to an electronic document encrypted in the manner described, the general password concept being based on the majority of passwords Keys (first key or the at least second key) is applied.

In an advantageous manner according to the invention, it is not apparent to the hacker, in particular, whether his entry of a key actually led to the correct result or whether the result of the decision he reached only formally corresponds (is equivalent to) the original, secured amount of data. , in fact, however, the content is not useful for him. Specific examples will be explained later in the description of the figures; For a better explanation, it should only be given as an example that such a decision result achieved by entering the second key can be, for example, a sentence structure or a result of numbers, which (s) formally, ie of their structure, their grammar etc., make sense for the hacker but the actual content differs from the original amount of data so that the result of the decision is actually not useful for the hacker. However, since he cannot publicly recognize this at the time of his decision-making process, he will receive the formally correct decision result stop his further access attempts, whereby the intended security increase according to the invention is achieved.

In particular, in the event that a large number of second keys are generated within the scope of the present invention (compared to, for example, just a first, correct key or a set of first keys), the probability is that the hacker will gain access during his unauthorized attempts comes a decision result that is not equal to the original amount of data, so that the security effect of the present invention is supported accordingly. The diffusivity or non-recognizability achieved with the present invention as to whether the result of the decision actually corresponds to the correct, original amount of data thus opens up a completely new dimension in data backup.

The operations specified in the main claim are advantageous for realizing the invention, which are also to be referred to below as semantic encryption and which, within the known formal structure, create the prerequisite for substantial changes in formal equivalence (in this respect the term "grammar" should also be used as A set of conventions and regulations are understood, the application of which makes both the original amount of data and the result of the decision achieved with the second key appear as if it were a regular result, for example a grammatically correct, (apparently) meaningful sentence). In particular, the operation of exchanging information components provided for in the context of the present invention, for example, against a grammatically corresponding (= equivalent component which, however, deviates in content, allows this effect to be carried out in a particularly advantageous manner For example, by replacing values in numbers with other values the, or names are changed by others, or locations are changed by others, etc. (without, of course, the present invention being limited to this simple operation).

The present invention is particularly advantageously further developed in that an authorized or unauthorized user does not directly enter the key (or linked via electronic operations), but rather a password, which typically consists of only a few elements and thus, for example, can also be easily recognized, or access control and control instrument, together with a suitable unit, which is then linked to the first or second key via the key file provided for further training, and which is then used in the decryption unit for decryption. Such a key file, which thus determines an assignment between the passwords to be entered by the user and the keys actually to be used, makes it possible to provide a large number of passwords, to assign them to one or more of the second key and in particular also to allow passwords to be predetermined in advance, which lead to the correct (ie first key) or to the only formally correct, but incorrect in terms of content (ie second key) result; this seems particularly appropriate for those application cases in which it is already conceivable which passwords a hacker would typically use to make an unauthorized access attempt, and such passwords, as expected, could automatically be used in advance for the second key and thus the only formally correct decision result were assigned (with the effect that the hacker would then probably interpret this as an already correct decryption attempt and thus stop further decryption attempts). As an alternative or in addition, the password and the key file (or an assigned key processing unit) is formed in such a way that a password entry triggers an indirect assignment operation, for example a jump in the key file formed as a table, so that the options for flexible password and key assignment can also be expanded.

In principle, it is also possible, within the scope of realizing the invention, to use the terms “key” and “password” synonymously.

In general, it must be stated for the present invention that the information components of an electronic document according to the invention have meaning meaningful to the user and are realized as written words, numerical values, single images, film and / or sound sequences or frames or combinations thereof, the grammar em Written words, numerical values, single images, film or sound sequences or frames form the underlying system of the formal structure.

A further preferred development of the invention also provides means for the inventive aspect of storing a or password-protected access to an electronic document, which are used to assign a plurality of passwords in an n: 1 relationship for the second key and / or Means for specifying at least one password by the user are provided by input into the key file unit.

Further refinement possibilities of the invention provide that the manipulation unit is assigned a random control unit according to the specific implementation of the encryption unit provided for the further development, which is used to interchange, remove, add and / or exchange the individual unit of information and / or sequence (s) by the manipulation unit ) of Controls information components randomly, in particular not reproducibly.

Additionally or alternatively, according to a development according to the invention, it is provided that the manipulation unit is assigned an encryption parameter unit which is designed to store and / or set predetermined parameters for the exchange, removal, addition and / or exchange by the manipulation unit, in particular with regard to The depth of encryption achieved by the number of exchanges, removals, additions and / or exchanges.

Further advantageous and in accordance with further training, the manipulation unit is also followed by a conversion unit which is designed to generate an electronically transferable volume file from the encrypted data set as an encrypted form of the electronic document and a preferably actively executable program and / or script file from the key data set as a reconstruction file.

While the present invention has its primary fields of application in the protection of electronic data and files, both locally and remotely, the range of applications is unlimited. In particular, it should also be appropriate to apply the present invention to the particularly sensitive area of access protection on PCs. Further advantages, features and details of the invention result from the following description of an exemplary embodiment with reference to the figures; these show m

1: a schematic block diagram of the device according to the invention in accordance with a first embodiment;

2: a representation of a data record decrypted with the first key, which corresponds to an original data record;

3: a representation of a data record decrypted with the second key, which is not usable in terms of content, but is formally equivalent to the original data record;

Fig. 4: a schematic block diagram of the functional components of the cryptographic unit 10 m Fig. 1 and

5: a schematic block diagram of a further embodiment of the present invention, which practically implements the general inventive concept.

A encryption unit 10, usually implemented by means of a commercially available PC, is designed in the manner shown in FIG. 1 with an input unit 12 for original data, in the present case data of an internal reporting system with financial data. Data to be encrypted is sent to the encryption unit 10 via the unit 12 (additionally or alternatively implemented as a data storage unit), which then generates an encrypted amount of data (encrypted file) and stores this data storage unit 14. The key file required for correct decryption is simultaneously n a final stored file unit 16, and a password with which a user can access the correct key file (hereinafter also referred to as the first key) is given to the user by means of a password interface or output unit (18) in a suitable manner, eg. B. by display, printout, Em or predefined by the user or the like. , communicates.

If an authorized user now again enters the correct password into the system em via a password emitting unit 20, a subsequent decryption unit 22 accesses the key file unit 16 with this password, and receives the correct decryption file (the first key), then carries out the decryption process on the encrypted document (ie the corresponding data record) stored in the data storage unit 14 and outputs the correct, decrypted result via a suitable output unit 24, e.g. B. a screen, printer or the like, the user.

As far as the system described or its functionality is correct with devices from the prior art; in addition, however, they distinguish the functional components shown in FIG. 1 by the following technical properties:

On the one hand, the encryption unit 10 performs an encryption operation on the original data to be encrypted (the original data set), which involves exchanging and / or removing an information component from the original data set, adding an information component to a predetermined position m of the original data set or else There is an exchange of an information component for an information component that is not usually contained in the original data set. This process, which is also to be cezeicnnet in the following as semantic encryption, is m the international patent application PCT / EP 00/06824 described as a method for encrypting an electronically stored, original amount of data and with regard to the generation of the key or decryption described there should be considered as fully included in the present application description as belonging to the invention.

The semantic encryption carried out is explained by way of example using the first example in FIGS. 2 and 3; 2 shows an original file or the result of a correct decryption of a semantically encrypted original file, and FIG. 3 shows a corresponding data record of how it can be the result of a semantic encryption: as the comparison of FIGS. 2 and 3, the respective data records that describe a transaction process in the internal, company-specific information system of the exemplary embodiment are each a booking process that can still be recognized as a booking process even after encryption (FIG. 3) The various data contents have been modified: Both the date and date can be recognized, but the content differs from the original date of Fig. 2. The same applies to the specification of the process, whereby the original content component "input" by eme grammatically equivalent content component "output" has been replaced, as well with regard to the amount, the currency indication "DEM" by means of an equivalent currency indication "USD". Finally, using the example of the balance as an example, it is shown that, by swapping the amount, there is of course a monetary amount, which, however, does not match the original content.

The device according to FIG. 1, and there in particular the encryption unit 10, has the property of generating at least one encrypted data record according to FIG. 3, which, as explained above, does by its own Form corresponds to a correctly decrypted or original result, but is different in content from it and is therefore unusable for the user (or an unauthorized accesser); Without further checking measures, however, the accessing party is not able to determine whether the data record in FIG. 3 is actually a decryption that is correct in terms of content.

In other words, in the context of the present invention, through a suitable implementation of the encryption process in the above-described, semantic manner with the specified operations, at least one encryption result is generated, which is still encrypted in terms of content, but is formally and structurally an unauthorized accessing party It is not allowed to determine whether the correct result is actually available without checking the content.

This technical measure is used in the context of the present invention in order to increase the security of the encryption system shown in FIG. 1: by performing the encryption process, the encryption unit 10 generates the first key (which enables the original data record according to FIG. 2 to be restored). and additionally generates at least one second key, which leads to a decryption result according to FIG. 3, the decryption result shown in FIG. 3 can induce an unauthorized accessor to refrain from further decryption or access attempts, on the assumption that it is actually a question of a decision the result he wanted.

In principle, while the keys generated in this way (first and second keys) can already be considered as passwords in the context of the present invention, it is particularly practical in practice to use the first key (the first key file) or the second key (the second key file) to assign passwords by means of the encryption data unit 16 (or alternatively to a unit producing an algorithmically generated connection), which can be made shorter and more compact than the key files - which necessarily have a certain amount of data.

Specifically, a key file A (for Fig. 2) or B (for Fig. 3) would contain all the information and operations that are necessary for the restoration or production of the respective formally equivalent data records, such as the exchanged terms, index information for an order shift etc., so that immediate handling of the keys (or key files), e.g. B. in the form of character strings is not very practical. On the other hand, as shown in Table 1 below, one assigns the respective key files A (for the correct decryption according to FIG. 2) or B (for the only formally correct decryption according to FIG. 3, which does not lead to content) in the form of a password four-digit number, handling is significantly easier for the user, since he only needs to remember the respective password:

Table 1:

Assignment of password and key file in key file unit 16

As can be seen from Table 1, in the present exemplary embodiment, the encryption unit 10 generates a correct key file A, to which the password "7123", to be entered in the transmission unit 20, is assigned. In parallel, however, in the exemplary embodiment shown, the encryption unit 10 generates four further passwords (or these are entered by the user in a suitable manner), each of which is assigned the key file B, with the effect that when the number sequence “1302” is entered, the decryption unit 22 the result shown in FIG. 3.

It is particularly preferred here to pay the number of passwords which lead to an only formally correct, but not content-relevant output according to FIG. 3, significantly larger than the number of passwords for the correct key file A - the probability can be correspondingly reduced influence that trying out or additional input em unauthorized access to the result of the decision according to FIG. 3. Any entry outside of the passwords shown in Table 1 in the present case led to an - obviously - unusable result of the decision. A variant of this edition of the decryption result could be that the recognizability of the wrong or unusable decryption result lies in a special form, design or labeling of the decryption result that is known to the user as such; Examples include a special coloring of an output document, an arrangement of an image or a graphic element of a certain position, an acoustic signal or the like.

It is particularly preferred is also in accordance with a (in Fig. Not shown) password Emgabe- or default unit ^M oglιchke to provide t, particularly relevant, usually by an infringer or unauthorized expected password inputs characterized ir the table for the Schlusse_dateιemheιt to take into account that this the only formally correct decision result is assigned to dimensional attacks in advance. Typical cases of application for this are, for example, in the case of passwords consisting of numbers, dates of birth or similar combinations of numbers, of which an unauthorized accessor usually assumes that they have been set or used as passwords and it is therefore to be expected that an unauthorized accesser will use his first Access attempts allowed to start. Hacker attacks can therefore be countered even more efficiently by pre-selecting the passwords.

A further training option or preferred variant of this exemplary embodiment is not to explicitly specify predetermined (preselected) passwords, but rather to use them appropriately from an electronically available (typically extensive) selection list, for example a dictionary, and to take them into account as set passwords. This then had the consequence that, for example, in the case of a large number of improper access attempts also based on an electronic directory (dictionary), the reaction provided for in accordance with the invention, namely the drawing of the second function mode, can be reacted to at short notice, whereupon to be expected is that the abuser stops hacking.

Another possibility of further developing this inventive idea, but also the previous general inventive idea, is to parameterize, preferably randomly, parameterize a large number of set passwords (second passwords within the scope of the invention), so that this additional measure also enables Possibility is created that passwords provided as second passwords within the scope of the invention nevertheless do not lead to a function triggering or to an error message or the like. According to a preferred development of the invention, it is provided that, with regard to the correct password leading to the result, for example “7123” in Table 1, the system eme fuzzy in accordance with the invention is generated automatically by the fact that adjacent characters of this character string, eg , B. "8123", "7234", "7122" etc., automatically "B" is assigned as a key file. This measure can also effectively increase the security of traditional password-protected data access.

A practical constructional implementation form of the encryption unit 10 and of the aspect of the present invention relating to the semantic encryption infrastructure will be described below with reference to FIG. 4.

FIG. 4 shows a schematic block diagram representation of the structure of the encryption unit 10 as a key generation and administration unit with the associated functional components within the scope of the present invention, which can be used to protect electronic electronics using the semantic encryption technology according to the invention Convert documents into the protected data set (volume file) and associated keys (key files or key data sets). The embodiment described in connection with FIG. 4 makes it possible within the scope of the invention not only to generate only a set of key data (which leads to the original, correct amount of data when restoring), but also a plurality of key data sets, so that this aspect of the The presence of a plurality of possible keys (one of which in turn also leads to the correct result in terms of content, and not only correctable in terms of schema) the security of the present invention can be realized. As an alternative example to FIGS. 2 and 3, FIG. 4 is to be used to describe an electronic text document which is in a conventional format (for example Microsoft WORD) and was created using suitable text editors. The text document consists of the sentence

Peter goes to the train station at 8:00 p.m. The train is on time.

4 is stored in the memory unit 12 according to FIG. 4 and is to be semantically encoded in the manner to be described below by the action of the further functional components shown in FIG. 4.

A read / access unit 54 connected downstream of the document storage unit 12, which interacts with a format data unit 56, determines that the above document, which is stored in the storage unit 12, follows the format structure MSWORD (ideally, the format data unit 56 contains all format or Structural information of common data formats), and accesses the (document-related) format information to the text document in the document storage unit 12. The analysis unit 58 downstream of the reading / pulling unit 54 is now able to analyze and evaluate it on the basis of the document information read by the reading unit 54, the analysis unit 58 firstly breaking down the electronic document m and its individual information components and stores this in an information component storage unit 60 (in the present example these were the individual words), and additionally recognizes the document structure as a structure of two sentences delimited by points and stores this document structure in the document structure storage unit 62 decomposed. In this respect, the content of the unit 62 is given the character of a document-specific metafile, which can also be accessed later (also possibly only selectively). Specifically, the content of the document structure storage unit after the analysis of the original document by the analysis unit could look as follows:

Set 1 (1, 2, 3, 4) Set 2 (1, 2, 3),

while the information component storage unit 60 contains information components corresponding to this structural analysis, that is to say words:

(1.1) Peter

(1.2) goes

(1.3) at 8 p.m.

(1.4) to the station (2.1) the train

(2.3) punctually

With this preparation, which is important for the subsequent implementation of the encryption operations, it is now possible to carry out the basic operations of the semantic encryption both on the individual information components (in the present example, the individual words) and on the sequences of information components or structures. namely swapping, removing, adding or exchanging. The essential protective effect of the semantic encryption according to the invention lies in the fact that these operations are not carried out arbitrarily, but rather that the grammatical, syntactic and / or format-related rules are maintained, so that the result of the encryption is a result of which Schematic (ie without checking the content) seems to be correct, in other words, one does not see that the fact is an encoded result. In the present exemplary embodiment, with the help of the encryption unit, the electronic document specified above becomes the following text:

Thomas comes from the cemetery at 1:00 a.m. The train is on time.

Without knowing the true content, this sentence appears to be an open, unencrypted result, so that an essential protective effect of the present invention is that an attacker may not even get the impression that this text is an eme Encryption, and so attacks from the beginning on this text.

Specifically, in the present exemplary embodiment, the effect of an equivalence unit 70 (which in its simplest version can be understood as a table or database of equivalent, ie corresponding and interchangeable, terms) was carried out as follows: The content component "Peter" of the original document was changed grammatically equivalent content component "Thomas" has been replaced, while sentence structure and grammar have been retained, but the meaning of the original document has already been destroyed. Accordingly, the content component "goes" of the original document has been replaced by the equivalent component "comes", the content component "at 8:00 p.m." was replaced by "at 4:00 p.m." (here it was determined by the effect of the equivalence that it was a numerical date in the form of a time, so that manipulation was possible within the permitted times), and the content component "to the station "was replaced by the content component" vo m cemetery ". It was also ensured by a semantic control unit 72, which is also connected to the manipulation unit 64 and influences the described encryption operation, that the encryption result "... comes ... from the cemetery" is grammatically and syntactically correct, so that it cannot be identified as manipulated can. (That too sentence "to" would be correct here). It was also determined by means of the manipulation unit 64 and the interacting equivalence unit 70 or semantic rule unit 72 that the content component "the move" of the following sentence has a content-related relationship to the content component "graveyard" newly introduced in the previous sentence, so that Even without encrypting the second sentence, a completely different meaning (and thus an encryption effect) arises.

10

In particular, the functionality of the equivalence unit 70 or the semantic rule unit 72 corresponds to an electronically accessible form of a thesaurus or the like, with which, in the case of words, for example, equivalent 15 or opposite (but conceptually related) terms can be found easily and further can be used.

In addition, in the exemplary embodiment in FIG. 4, it is provided that the encryption depth of the encryption achieved by the encryption unit 10 according to FIG. 4 can be preselected. Namely, the manipulation unit 64 is assigned an encryption parameter unit 66 which makes the sequence of the individual operations achieved by the manipulation process in the unit 64 controllable and / or influenceable and thus enables an encoding depth or a number of emulation operations to be influenced can be. This can in particular also be achieved in a random manner, by means of the random control unit 68, which is also assigned to the manipulation unit.

The result of these described simple encryption operations is the encryption result

"Thoma s comes from the cemetery at 1:00 a.m. The train is on time." output as volume data (ie as an encrypted amount of data) and stored in a storage unit 14 provided for this purpose, while the reconstruction of the first key (in the present exemplary embodiment, information about the words exchanged in each case with their position in the sentence and in the respective content terms) in the key file Storage unit 16 is stored. Accordingly, the associated first key file for the storage unit 74 could look as follows (in the following example, the reconstruction unit interprets the EXCHANGE command in order to carry out the swap specified in the argument):

EXCHANGE (1.1; Thomas) EXCHANGE (1.2; coming)

etc,

In a further development of this embodiment, the vocabulary of the command language itself is dynamic and can be changed by functions of a script language; the EXCHANGE command itself could be replaced by any other expression.

According to the invention, it is further provided to generate a plurality of key files and m of the storage unit 16, of which only one, however, generates the correct reconstruction result. Key file 2 could accordingly begin as follows:

EXCHANGE (1.1; Rudiger)

(Rest like key file above);

Key file starts with:

EXCHANGE (1.1; Claus;

etc. In the exemplary embodiment in FIG. 4, an additional output unit 78 is connected downstream of these two storage units, which in a particularly simple manner prepares the plurality of keys 16 in the form of scripts and can output them as executable script files 84; this is done with the aid of a conversion unit 80 which, in an otherwise known manner, generates volume document 82 corresponding to the encrypted version from the volume data of the storage unit 14 and from the index or reconstruction data of the storage unit 16 several structure descriptions which can run independently within a suitable execution environment , Scripts, for example as Javascript, XML, VB-Scπpt or the like. And which, in the case of the script file associated with the first key, can then independently process the volume document 82 when it runs and return it to the original, unencrypted form.

The embodiment shown schematically in FIG. 4 is suitable not only for generating a key file for the storage unit 16 (or as an executable script file 84), but also for a plurality of these, of which, however, ideally only one content actually exists leads to a correct result, while key files other than scripts trigger a decryption process, which also leads to a meaningful (and thus apparently correct) result, but the content does not match the original version. This then increases the security of the locking device. It should be immediately obvious that even small _nhaltlιche deviations of the original document destroy (for a user actually worth forming) sense completely constantly, so it might anyoptionsandmodifica only low ^K or a small number of Verschlusse- development operations (with the consequence of correspondingly short script file as key data), in order to achieve the intended protection purpose, until the already mentioned 0 ^' ιcnt encryption of the original file, which Purpose derives solely from the fact that an unauthorized accesser has the uncertainty whether he is dealing with an open (ie corresponding to the original file) or with an encrypted content that does not match the original file.

As mentioned, the present invention is not limited to the exemplary example of number or text files. It is therefore particularly appropriate to encrypt any further electronic documents in the manner described in principle, as long as these electronic documents have a structure of content components that is suitable for the basic operations of exchanging, removing, adding or exchanging. Typical application cases are in particular music files, which are usually available in MP3 format and, where it is possible within the scope of the present invention, the data structures (so-called frames) specified by the MP3 format individually or in blocks (ideally also in cycles or sections) , related to the respective piece of music) to be exchanged, removed or exchanged. The same applies to image and / or video files, because the known document formats common there are also based on a sequence of frames as content components (in the case of images or electronic videos, these are the respective individual images), which can be manipulated in the manner according to the invention.

Further possible and advantageous further developments of the invention provide that a reconstruction file, in particular in the form of a script or the like, is in an ASCII and / or HTML file format. In particular with regard to a firewall protecting a client and / or server unit, there are thus simplified possibilities for penetrating such a firewall unhindered.

Another advantageous development of the invention provides for a reconstruction file suitable for electronic document data (of the same or a different file type). embedded in such a way that the format and (reproduced) content of such a guest file remains unchanged; In a particularly advantageous manner, such a concealed transfer of reconstruction files with the purpose of further increasing security is therefore an area of the guest file which is not directly effective in terms of content, for example comment or information areas, etc.

In particular, the possibility of realizing the keys or reconstruction files according to the invention as scripts offers numerous possibilities for further development: for example, the script-controlled merging within the scope of the present invention enables further flexibility or further increase in security by not restoring all of the script files as reconstruction files enables the unencrypted form of the electronic document by merging, but a plurality of scripts as reconstruction files is necessary, which, for example Cover predetermined time periods of the electronic document and then call them up successively. As an example, the invention could be implemented in such a way that each script file as a reconstruction file for a period of about 30 seconds enables an MP3 music piece to be reconstructed, and then another reconstruction calls (again script-controlled) a subsequent, further script file Reconstruction is necessary. In addition to an increased security effect, there are possibilities of context-dependent generation or reconstruction of the original original document, including even the possibility of contextually and specifically restoring different variants of the original document.

A further embodiment of the present invention, which corresponds to the most general form of the present invention and the functional unit according to the invention as an additional next abstract functional unit that can be implemented with any functionalities, either as a device for document encryption and document decryption according to 1, or additionally or alternatively as a device for controlling or triggering a payment transaction, for executing an (electronic) communication operation, for identifying and / or authenticating a user or (generally) for exporting a suitably preset program operation on a data processing device. To this extent, the invention also encompasses that the functional unit according to the invention (in particular according to claim 6) can be operated in the first and second functional mode by means of at least one control parameter, with additional means being provided for deriving the control parameter from the first and / or second password. In a concrete practical implementation, this control parameter (which is usually also present in a plurality) would influence a decryption or decryption operation of the functional unit. Specifically, this would then correspond to the first exemplary embodiment described above with reference to Table 1 or FIG. 1, where keys are assigned to the first or second passwords by means of a unit and these keys correspond in this respect to the control parameters provided in the further training. In this respect, the control parameter provided in accordance with the further training also goes beyond eme (traditionally already known) activation or deactivation of a functional unit, depending on whether a correct password has been entered: The control parameters in the sense of this aspect of the invention are, in particular, those directly related to the process To understand functionality of the functional unit determining parameters which, according to the invention, influence the first and second functional operation. In particular, the invention also encompasses control parameters provided according to further training not exclusively as parameters derived from keys or to be assigned to a key. to be understood, but in particular also as an internal variable or other, directly function-relevant parameters which, ideally without immediate perception or accessibility by a user, are critical elements in the proper functioning of the functional unit.

Of particular importance is the aspect of the control parameters in connection with or implemented by keys in a combination provided for further training, which semantically encrypts electronic documents or the like in the manner described above, ie. r. as control parameters in the semantic encryption process.

As shown in FIG. 5, an input unit 100 for a password is provided for interaction with a user, which may typically be implemented from a keyboard or the like. This input unit 100 is followed by a password checking unit 102 which, in the exemplary embodiment described using a password file device 106, compares the validity or correspondence of the password entered with stored passwords and, in response to this comparison, transmits a corresponding control signal to a downstream functional unit 104.

According to the present invention, provision is made for recognizing a first password stored in the storage unit 106 as the correct password and then triggering a first functional operation (analogous to the first embodiment according to FIG. 1, this then became the assignment of the key file A according to Table 1 vc ™ mean first exemplary embodiment).

However, provides the password Prufu firmly ^{* ~} gsemheit 102 by querying the data storage unit 106 that em by a user, the unit m 100 entered password corresponds to one of the second passwords (which eoenfalls, preferably in Plural, m are stored in the data storage unit 106), a second functional operation predetermined according to the invention, which, however, does not correspond to the one actually intended by the user, was triggered. In the more concrete implementation form of FIG. 1 (Table 1) described above, this would be the case when the key B is assigned to the plurality of keys according to FIG. Table that was an example of the plurality of second keys according to the invention.

FIG. 5 also describes a device which makes it possible to generate the first and, preferably, a plurality of second passwords in the manner according to the invention. This is done in the manner shown by a password generation unit 110 which is assigned to the data storage unit and which communicates with the user by means of a password communication unit 108, the unit 108 either for user input of the second key ice (and / or the first key, which is preferably to be provided in plural) ) is formed, or else the first and / or the second key is / are generated automatically by the unit 110 and is then output to the user by means of the communication unit 108.

A particularly favorable form of implementation in the exemplary embodiment in FIG. 5 shows the directory or dictionary unit 112 assigned to the password generation unit 110, which, in accordance with further training, provides that not a (small) number of passwords is specifically generated and subsequently stored in the unit 106, instead, a password supply to unit 106 (with the purpose of password checking by unit 102) is dynamized and can be done automatically from the large number of terms or password specifications stored in unit 112. In this respect, a particularly suitable example for the unit 112 would be an electronic lexicon or an electronic thesaurus. In practical operation, the user enters the password 100 into the system using the unit 100; the password checking unit then determines one of three possible operating cases: either it is an correct password (first password), which then triggers the first, predetermined (and intended) functional operation of the functional unit 104. Alternatively, the entered password is a second password in the sense of the invention, that is, the checking unit 102 recognizes this password as being present in the memory unit 106 (or introduced by the dictionary unit 112) without this password being the first Password corresponds. The decision of the password access unit therefore triggers the triggering of the second functional operation of the functional unit 104, which in turn is a planned, predetermined functional operation, which, however, does not correspond to the intended (intended). This could be practically realized, for example, in that a wrong or unselected document is reproduced in a document reproduction unit as a function unit 104, or a program that is not intended or planned runs in a program execution unit as a function unit 104 e.

The third possibility in response to user input in unit 110 is that password checking unit 102 determines that neither the first nor one of the second passwords has been entered. As a result, a customary reject or error routine is output, as is expected or typically generated in conventional, password-protected systems in response to an incorrect password input.

The present invention is not limited to the exemplary embodiments described. Rather, it should emerge from the description of FIG. 5 and the indicated context, in particular, that the invention can be used for a large number of possible uses and password environments is; In this respect, the exemplary embodiments and functionalities described, in particular the unit 104, are only to be understood as exemplary, and the exemplary embodiment described with reference to FIG. 1 merely represents a concrete (but particularly favorable) form of implementation of the present invention. that inexpensive further training of the concrete form of implementation according to Fig. 1 can be analogous developments of the more general implementation form of FIG. 5.

Claims

1. Device for password-protected storage of an electronic document and / or for password-protected access to it, with an encryption unit (10) that is used to carry out an encryption process of an electronically stored original data set, to generate an encrypted data set and to generate and output a first key and a decryption unit (22) which is designed to decrypt the electronically stored encrypted data set and to restore the original data set in response to manual input and / or electronic linking of the first key,

characterized in that

the encryption unit (10) is designed for the additional generation of at least a second key, this second key being formed such that decrypting the encrypted data set with the second key leads to a formally useful decryption result that differs from the original data set, but the decryption result is not usable for a user in terms of content, the encryption unit (10) for performing the following operations on that consisting of a sequence of information components of a metalanguage in the form of a written language, a number system or of information components in a predetermined, uniform, from a grammar Embossed formal structure arranged data elements, in particular picture, sound or program information, existing and in a a plurality of original data sets stored in electronically addressable memory areas:

Exchanging and / or removing an information component in the data set and / or adding an information component to a predetermined position in the sequence of information components and / or exchanging an information component for an information component which is preferably not contained in the original data set by computer access to a respective one of the memory areas , wherein the first key contains information about the exchanged, removed, added and / or exchanged information components and is formed in such a way that it allows the original amount of data to be restored by the decryption unit and the second key contains such information about exchanged, removed, added and / or Exchanged information components contain that the decision result is a sequence of information components in the predetermined formal structure that deviates from the original amount of data and / or compared to the r original information has exchanged information components.

2. The device as claimed in claim 1, characterized by a key file unit (16) which is associated with the encryption unit and the decryption unit and is designed to store the first and second key data and to store a plurality of passwords, the passwords being able to be input into the device by the user and the key file unit (16) can be used to assign the passwords the first or the second key for the recovery.

3. Device according to claim 1 or 2, characterized in that the encryption unit (10) comprises: an analysis unit (54, 56) which is used to access eme and to electronically record at least one sequence of information components of the original data set in response to predetermined ones and / or determined format and / or structural data of the original data quantity is formed, - a manipulation unit (64) connected downstream of the analysis unit, which is used for

Exchanging and / or removing an information component in the original amount of data and / or adding an information component at a predetermined position in the sequence of information components and / or exchanging an information component for an information component that is preferably not contained in the original amount of data, and for generating a key amount of data as a reconstruction - Ons file with information about the exchanged, removed, added and / or exchanged information components, which is formed in such a way that it allows the original amount of data to be restored.

4. The device as claimed in claim 3, characterized in that the manipulation unit (64) is assigned an equivalence unit (70) which, for at least one information component in the original amount of data, has at least one equivalence information component stored electronically, the equivalence information component being formed in this way that it corresponds grammatically, format-wise and / or syntactically with the associated information component.

5. The device according to claim 3 or 4, characterized in that the manipulation unit is designed to cooperate with a semantic control unit (72) which is set up in such a way that the exchange, removal, addition or exchange within the / the grammar, format and / or syntax that is determined by the format and / or structure data.

6. Device for password-protected access to a functional unit (104) with a password-emitting unit (100), which is designed to enter a password by a user, a password-testing unit (102) connected downstream of the password-emitting unit, which, preferably by means of a assigned password storage unit (106), is designed to check the correctness of the entered password, and is configured to activate the functional unit (104) m a predetermined, first functional operation upon detection of a correctly entered password

wherein the first functional operation corresponds to an intended operation intended by the user, and the password checking unit (102) is assigned a password generation unit (110) which is designed as a correct password for generating a first password, characterized in that the Password generation unit (110) is designed to generate at least one second password, which is recognized as a second password by the password checking unit when the user enters the password emitting unit (100) and the password checking unit (102) as a reaction upon detection of the second password, is designed to trigger a second predetermined functional operation of the functional unit (104), wherein the second functional mode is an operation that differs from an explicit error message or an error routine and differs from the first functional mode and does not correspond to the operation intended by the user.

7. The device according to claim 6, characterized by eme password communication unit (108) for Einzwzw. The user specifies the first and / or the at least one second password for the password generation unit (110).

8. The device according to claim 6 or 7, characterized in that the password generating unit (110) is associated with an electronic directory or dictionary unit (112) which generates the first password and / or the at least one second password on the basis of at least one entry of the electronic directory or dictionary unit.

9. Device according to one of claims 6 to 8, characterized in that the functional unit eme a device for displaying an electronic document, a device that controls or triggers a payment process, em device that identifies and / or authenticates the user, and electronic device that carries out a communication operation Communication unit and / or an electronic data processing device performing a programmed operation.

10. Use of the device according to one of claims 1 to 9 for the activation of access to electronic documents stored and offered locally or via a remote data transmission system, including document directories, in an electronic data processing unit, in particular a PC.