DE10121874A1 - Special standard data-input/data-output processor, after decoding, original length data is reestablished - Google Patents

Abstract

A special processor has 7.3585x10<1>013 coding possibilities for input and output data decoding or encoding. Each character or symbol is replaced according to a table and each 256 characters or symbols are interchanged according to a second table. After the decoding the original length of the data is constructed and the access to the data bank of the keys/codes is executed only for carrying out tasks or otherwise no access to the data bank can be made.

Description

The invention relates to increasing security in data networks.

The otherwise usual comparison with the current state of the art is hardly possible because existing solutions are largely subject to confidentiality.

I see the disadvantages of existing solutions in that:

• - mostly unencrypted data enter the network and
• - information obtained after an unauthorized intrusion into the security systems can be the intrusion at a different time in a different place facilitate.

Practically implementing a special processor is no problem today if it works is clearly described.

The aim of my invention is

• 1. Always send data encrypted through the lines and thus one to make unauthorized access at least significantly more difficult.
• 2. Physically separate the keys from all other data.

The invention uses the part of the findings from the invention described below, "Method for cryptography based on a new core with source key and executable key and one example each for a symmetrical and an asymmetrical cryptic method as a surface for this core":

• 1. There are a total of around 7.3585.10 ¹⁰¹³ options for two tables with 256 values each, each containing one of the values from 0 to 255 in any order.
• 2. Data can be divided into sub-blocks of 256 bytes each.
• 3. The following two actions correspond in their speed to a simple data transfer:
  • 1. 3.1. the numerical value of a character is used as the position in the first table and another character is extracted from there. Each incoming character always results in the same other outgoing character, however. , ,
  • 2. 3.2. the position that the character had in the sub-block is used to read the new position of the character under this position in the second table. In addition to (3.1), 256 characters are apparently arbitrarily interchanged with each other.
• 4. When encrypting, data may also be encrypted in the last sub-block are not the content of the data to be transmitted. The actual length of the last subblock too transmitted data is attached to the encrypted data and for decryption in the correct length used.

Special processors have the following advantages over universal processors:

• - You can carry out your special tasks much faster because individual steps lead to a Algorithm are already combined into a complex command.
• - You cannot (!) Subsequently learn a command that is in the interests of its owner contradicts.
• - They are even cheaper by eliminating floating point arithmetic, for example.

Fig. 1 shows the structure of the processor in a schematic representation.

In contrast to the above. Invention here are the finished tables for encryption in one Database saved. This means no danger because the processor has special tables Lines are fed, they can only be stored where the processor uses them for its Work is needed and the processor is unable to pass it on to the outside world.

Before the output of encrypted data, the processor automatically sets its own unencrypted data Address at the beginning of the outer data buffer.

Before loading a key from the database, the new address with the old one Address compared so that the database may not be accessed. If the address is one If the recipient is not found in the database, an error status is set. Becomes the address of a sender is not found in the database, the received data will be ignored. For decryption, the tables are used for encryption during loading in the processor converted into tables for decryption. You just reverse the effect. If at Example in the first table for encryption in the first position (start plus 0) the value 9 is then entered in the first table for decryption on the tenth position (Beginning plus 9) the value 0 entered.

An attempt with the valid address of a sender and non-encrypted data intrusion remains ineffective because the data is destroyed by decryption.

Two data buffers exist only because they use the two of them mutually Buffers the writing of one buffer and the reading of the other buffer run in parallel can. The size of the data buffers must meet the network requirements.

The sequence control ensures the synchronization of the processes and the correct assignment of Buffer.  

In a non-local network, each end user is connected to a node and these nodes are networked with each other.

To send data in encrypted form through the lines, not every end user has to Agree encryption for every other end user with whom he wants to exchange data. It Rather, it is sufficient if an end user manages the node to which he is connected encryption is agreed. In each node, the encryption of him associated end users and the nodes with which they want to connect. Within a node, all data entry / exit processors are with one PC connected, which serves as a database and for data maintenance. This PC must not be networked in any other way his!

End users are also equipped with a data entry / exit processor. The For example, an "end user's" database could be a smart card.

If the "key" of an end user has been lost or stolen, or an end user has expired for any reason to be excluded from network access, only the entry in a Database will be deleted.

An end user can also be on the go. It only has to be connected to external sources in order to access the network Communication channels select the node with which he has agreed on the key.

Claims (1)

A special processor characterized in that he

• - can decrypt or encrypt incoming and outgoing data with one of around 7.3585.10 ¹⁰¹³ possible keys without loss of transmission speed by replacing each character after a table and swapping 256 characters after a second table,
• - restores the original length of the data after decryption,
• - access to the database of the keys only for the completion of its tasks and otherwise no access to this database and
• - For decryption itself is able to generate tables for decryption from the tables for encryption during loading from the database.