EA009450B1

EA009450B1 - Method and device for receiving authentic digital information and identification authenticity thereof

Info

Publication number: EA009450B1
Application number: EA200600726A
Authority: EA
Inventors: Алексей Владимирович Домашев; Андрей Юрьевич ЩЕРБАКОВ; Евгений Александрович Дуйков; Сергей Вячеславович Сотский; Сергей Николаевич Русин
Original assignee: Некоммерческая Организация «Фонд Сопровождения Инвестиционных Проектов "Генкей"»
Priority date: 2006-04-03
Filing date: 2006-04-03
Publication date: 2007-12-28
Also published as: EA200600726A1

Abstract

The invention relates to the field of authenticity protection of digital information, namely to a method and device of receiving, storing and exchanging digital information, more definite to a method of receiving authentic digital information and further authenticity identification thereof, and to a method and device for receiving authentic digital information.The present invention can be used for protected transmission and protected storage of different digital data, primarily digital audio- and video information.Compared to the prior art methods of receiving authentic digital information, the present patent claim discloses methods and device and characterized by substantial increase of protection level of information transmitting and storing due to the use of unknown developed personal closed key and certification of the personal digital certificate in the authorized institution, as well as due to the increase of authenticity of digital audio- and video information transmission using electronic digital signature.

Description

The invention relates to the field of protecting the authenticity of digital information, in particular, to a method and device for receiving, storing and exchanging digital information, and more specifically to a method for obtaining authentic digital information with subsequent verification of its authenticity and to a method and device for obtaining authentic digital information.

The present invention will find application for the secure transmission and secure storage of various digital data, primarily digital audio and video information.

Currently, a very significant technical problem is the receipt, transmission and recording for long-term storage of digital information from various sources, primarily from audio monitoring and video surveillance systems. The significance of this problem is due to the possibility of introducing false information into the system (for example, by connecting additional video cameras or playing back previously recorded or rezsessirovanny fragments of video material). In particular, the likelihood of forgery does not allow the use of video materials in court practice or in the resolution of civil disputes, such as traffic accidents.

A number of patents offer to use digital signature to protect information.

For example, in the patent application of the Russian Federation No. 2258252, a description is given of a system and method for verifying the authenticity of dynamically connected executable images. This invention is related to computer systems, in particular to checking the identity of an application program in a dynamic loading environment. The technical result consists in determining whether there was an interference with the application program. The system includes a real-time authenticator that determines the reference digital signature for the program being executed using the contents of the digital signature, excluding those parts of the program being executed that were addressed by the program loader. The real-time authenticator, after downloading the executable image, determines the integrity of the digital signature to verify that the executable image has not been improperly modified, and also ensures that each of the pointers in the executable image has not been redirected improperly.

The disadvantages of this method are the following:

1. Use only for executable code, which significantly limits the scope.

2. Do not use the mechanism of protection against attacks of the mediator, which will be described below.

In addition, patent application No. 2001133322 of the Russian Federation describes a method for protecting and controlling the authenticity of information and an electronic cryptographic module for its implementation, designed to protect against the unauthorized distortion of each information-carrying document. The technical result is achieved by ensuring control of the integrity (and restoration) of the source information using the array of individual cryptographic protection tools (ie, individual digital signatures corresponding to at least a part of the initial information entered) on each document or establishing the fact of the destruction of said information.

However, this method applies to cash registers and the data stored in them and is also vulnerable to a mediator attack.

In the future, in the course of the description, special terms will be used, by which we mean the following.

Electronic digital signature - data added to a data block, obtained as a result of its cryptographic transformation, depending on the secret key and data block, which allow the data receiver to verify the integrity of the data block and the authenticity of the data source, as well as to ensure protection from fraud by the data receiver .

Verification of an electronic digital signature (EDS) under the open information block is performed using a cryptographic transformation and a public key corresponding to the secret key that participated in the EDS installation process.

Electronic digital signature ensures the integrity of messages (documents) transmitted over unprotected public telecommunication channels in information processing systems for various purposes, with guaranteed identification of its author (person who signed the document)

Electronic digital signature allows replacing traditional stamp and signature for paperless workflow. When constructing a digital signature, instead of the usual connection between a seal or a handwritten signature and a piece of paper, there is a complex mathematical relationship between an electronic document, a secret and a public key.

The practical impossibility of counterfeiting a digital signature relies on a very large amount of certain mathematical calculations.

Putting a signature on a document does not change the document itself, it only provides an opportunity to verify the authenticity and authorship of the information received.

Secret key - a cryptographic key that is kept secret by the user of the system. is he

- 1 009450 is used to generate electronic digital signature and encryption.

Next, instead of a secret key, we will use the term private key, which emphasizes the permanent non-retrievable storage of this key in a block. To underline the ownership of this private key to its specific owner, we will use the term “private private key”.

The need to have two keys to perform cryptographic operations, one of which is kept secret, while the other is generally accessible, leads to the implementation of the so-called mediator attack. To describe the attack, we use the following notation:

P - plaintext,

C - encrypted text,

EC () is the encryption function,

OK () is a decryption function.

From - the public key of the subscriber of the secure communication network M,

8t - secret key.

Subscriber A wants to send to the subscriber an encrypted message. It performs the conversion using subscriber B's public key from a directory located in a publicly accessible place. The received message C, the subscriber B decrypts using his secret key 8b.

When a mediator attacks in the network, an attacker X appears with his key pair Oh, 8x. Having access to the directory of public keys, X carries out the substitution of OU with his own key Oh, after which the attacker can freely read the correspondence C 'intended for the subscriber B. In order for the latter not to suspect anything, X can keep a local copy of OU to form the original Messages C. The basis of the attack is the assumption that the data in the public directory can be changed.

Mediator attack

To prevent the described attack, the digital certificate method is used. The certificate is an electronic document confirming the relationship between the public key and the identity of its owner through EDS using the private key of a trusted third party.

Thus, a certificate is some kind of certificate that allows authenticating its owner in the same way as a passport or driver's license. Adding additional information allows you to specify the scope of the certificate. Personification allows you to talk about a personal digital certificate, with which you can reliably check your digital signature without the possibility of an attack by an intermediary.

Thus, the personal digital certificate includes the user's personal public key, its identification data and is signed by the digital signature of some authorized body.

To verify the digital signature under the certificate, the public key of the authorized body is used, which all participants must have.

The present invention is based on the task of obtaining genuine digital information in such a way that the fact of obtaining information can be proved using reliable mathematical methods, primarily using verification procedures for digital signature.

This problem is solved by the claimed method of obtaining genuine digital information in the patent application of the present invention, followed by verification of its authenticity, consisting in the fact that a digital information stream is received from a source of digital information, which is divided into information-containing parts; then at least one information-containing part is provided with an electronic digital signature generated using a private private key, thereby obtaining authentic digital information, after which the authentic digital information, which is the information-containing part supplied with an electronic digital signature, is checked for authenticity by checking in her electronic digital

- 009450 howl signature using a personal digital certificate.

Due to the implementation of the claimed method of obtaining genuine digital information with the subsequent verification of its authenticity, the following fundamental subtasks are solved:

a) the owner certifies the information generated by him with the help of his personal private key of the user;

b) the private key is not known to anyone fundamentally, including the user, therefore, the information cannot be forged by anyone in principle;

c) the properties of a personal digital certificate are confirmed by an authorized body. This is very important, because ultimately the user cannot objectively, and even forcibly, change his personal digital certificate. In addition, it is possible to fix the legitimacy of the “personal private key - personal public key” pair with the help of the authorized body's EDS.

The most practically demanded is the case when the stream of digital information is obtained using a digital video camera or digital camera.

In addition, for fixing the authenticity of audio data, it is advisable to receive a stream of digital information using a microphone equipped with a unit for converting an audio signal into a stream of digital information.

To solve the problem of authenticity of digital information transmitted via communication channels, it is advisable to supply information-containing parts with an electronic digital signature and verify authentic information for authenticity in real time with spatial separation of the supply point and check location.

To create archives of genuine digital information, it is advisable to send it for temporary storage before checking the authentic information for authenticity.

To minimize the volume of the archive of genuine digital information, it is advisable to compress it before sending genuine information for temporary storage.

To ensure access for authorized and interested persons, it is advisable to send genuine information for temporary storage to the place of inspection, which is spatially remote from the place of supply of the information-containing part by electronic digital signature.

Thus, in general, the present invention solves the problem of obtaining genuine digital information, while in carrying out the claimed method, the fact of obtaining information is proved using reliable mathematical methods, primarily using EDS verification procedures.

Due to the fact that the receipt of authentic digital information and verification of its authenticity can be carried out separately in space and in time, as a rule, one person is engaged in obtaining authentic digital information in one period of time, and another person is engaged in verification of authenticity of this information in another period of time it is advisable to separately consider the method of obtaining genuine digital information as the most important part of the claimed method of obtaining genuine digital information with the subsequent verification of its authentic STI consists in that the digital information from the source, a stream of digital information, which is divided into information-containing portion; then at least one information-containing part is provided with an electronic digital signature generated using the private private key, thereby obtaining genuine digital information.

In this case, the case where the stream of digital information is obtained using a digital video camera or a digital camera is also the most practically demanded.

Another objective of the present invention is to create a device that implements the above method of obtaining genuine digital information.

This problem is solved by means of a device containing a unit for receiving a stream of digital information and dividing it into information-containing parts, having an input for receiving a stream of digital information and an output for transmitting information-containing parts;

a unit for storing a private private key and generating a digital signature using a private private key, comprising an output for transmitting the private private key;

a block for the formation of genuine information, which is an electronically signed information-containing part, including:

a) the first input for receiving information-containing parts, communicated with the output for transmitting information-containing parts of the block to receive a stream of digital information and its business

- 3 009450 on information-containing parts;

b) a second input for a private private key communicated with the output of the unit for storing a personal private key and generating an electronic digital signature using a private private key;

c) output for authentic information.

It is advisable when designing means to ensure the authenticity of video information to use additionally a video signal conversion unit into a digital information stream, comprising an input for receiving a video signal and an output for transmitting a digital information stream communicated with the block input for receiving a digital information stream and dividing it into information-containing parts.

When designing means for ensuring the authenticity of audio information, it is advisable to use in their composition an additional unit for converting a sound signal into a digital information stream containing an input for receiving a sound signal and an output for transmitting a digital information stream communicated with the block input for receiving a digital information stream and dividing it into information -containing parts.

It would be advisable to store the maximum possible amount of genuine digital information to additionally provide a device for long-term storage of genuine digital information with a block for compressing genuine information containing an input for receiving genuine information communicated with an output for genuine information of the block for generating genuine information.

When designing devices for long-term storage of genuine digital information, it is advisable to include in their composition an additional unit for long-term storage of genuine information, containing an input for receiving genuine information, communicated with an output for genuine information of the block for generating genuine information.

When designing devices for long-term storage of genuine digital information in the case of stationary execution or the case when the device must operate continuously, it is advisable to include in their composition a unit for long-term storage of genuine information with the possibility of removal from the device to obtain genuine digital information.

To correlate the fact of the formation of genuine digital information with real time, it is advisable to provide the unit for generating genuine information with a real-time clock supplying the information-containing part in the block of generating genuine digital information with a real-time tag.

Hereinafter, the present invention will be disclosed in more detail in the following detailed description of a video monitoring device for a vehicle, using an explanatory drawing implementing observation of the environment around the vehicle during its standstill and movement. The said video monitoring device is the real embodiment of the claimed device for obtaining genuine digital information.

The video control device is mounted in the vehicle cabin and contains a wide-angle video camera 1, which is a source of digital information, i.e. digital video signal.

Further, the device comprises a block 2 for receiving a stream of digital information and dividing it into information-containing parts, in this case information-containing parts are separate video frames. Unit 2 has an input 2a for receiving a stream of digital information and an output 2b for transmitting information-containing parts — individual video frames.

In addition, the video monitoring device contains a private private key storage unit 3 and generating an electronic digital signature using a personal control device owner's private private key, which has an output of 3 a for transmitting the personal control key of the video control device owner, and a computing unit 4 for generating genuine digital information, having the first input 4a for receiving information-containing parts - video frames, communicated with output 2b for transmitting information-containing parts from block 2 for receiving a stream of digital information and dividing it into information-containing parts - video frames, a second input 4b for a private private key communicated with output 3 a of block 3 for storing a private private key and generating a digital signature using a private private key, and output 4c for submission of authentic information representing an electronic digital signature with an information-containing part.

In addition, the device comprises a block 5 for compressing authentic information, having an input 5a for receiving genuine information, communicated with an output 4c for authentic information of a block 4 for generating genuine information. Computing unit 4 is additionally equipped with a real-time clock, and in the video monitoring device itself there is a removable memory 6 for long-term storage of 6 compressed genuine information.

The video control device that implements the above method of obtaining genuine digital information, works as follows.

- 4 009450

When the vehicle is moving constantly, and when parked, the signals from the external motion sensors receive the image from the video camera 1 through the input 2a in block 2 to receive a stream of digital information and divide it into information-containing parts - separate video frames.

Next, individual video frames from block 2 are received via output 2b and input 4a to computing unit 4 to form genuine digital information, where each video frame is provided with an electronic digital signature using a private private key received via output 3a and input 4b from a personal storage unit 3 private key and digital signature generation using a private private key. In other words, the computing unit 4 generates genuine information, which consists of information-containing parts supplied with electronic digital signature — video frames. In addition, the computing unit 4 supplies each frame with an electronic digital signature, it also provides each video frame with a real-time mark from the 4 hours of real time in the unit, which allow to set the exact time of shooting and recording of each video frame.

After this, video frames provided with electronic digital signature are removed from the output 4c for authentic information of the block 4, which are fed through the input 5a to the frame compression block 5, which results in compressed video frames that are sent to block 6 (also called a removable memory) for long-term storage .

As the removable memory 6 is stored for long-term storage, it is replaced with a new one.

In the event of a traffic accident or resolving a traffic accident dispute involving law enforcement agencies and / or insurance companies, genuine digital information stored in the removable memory 6 for long-term storage is retrieved, then the information is played with the authentication of each video frame using a personal digital certificate certified by an authorized body, and based on authentic information, conclusions are drawn on the nature of the analyzed p oisshestviya. In this way, the method of obtaining genuine digital information with the subsequent verification of its authenticity, disclosed within the framework of the present description and claim 1 of the claims, is implemented in full. Attention should be paid to the fact that a traffic accident occurs at one time period, and the authentication of information about a road traffic accident occurs at a different time period and, as a rule, the place of verification is spatially removed from the scene of a traffic accident. method of obtaining genuine digital information, providing for the provision of video frames with electronic digital signature.

In real life, another procedure is possible for implementing a method of obtaining genuine digital information with a subsequent verification of its authenticity, in which the information-containing part (video frame) is provided with an electronic digital signature and the authenticity of authenticity is checked in real time, but with spatial separation of the place of supply and location checks. This is advisable in the case when an authorized person watches an object in real time, and this can be, for example, a bank depository room, and at the same time an authorized person sees a video marker formed from an electronic digital signature on the monitor screen.

Other embodiments of the invention disclosed within the scope of the invention are possible, for example, instead of a video camera, you can use a digital camera or in the case when not video information is tested, but audio information instead of a video camera or digital camera is used a microphone equipped with an audio signal conversion unit information, but otherwise fundamental differences in such devices that implement the claimed methods, no.

Compared with all known methods of obtaining genuine digital information known to the applicant, the methods and apparatus disclosed in the present invention are characterized by a significant increase in the level of security of information transmission and storage by using an unknown personal key that has been developed and certifying a personal digital certificate by an authorized body and increasing the level security of information transfer in various communication channels, as well as improving the reliability of video and audio information transmission Formation through the use of electronic digital signature.

Claims

CLAIM

1. The method of obtaining genuine digital information, followed by verification of its authenticity, which consists in the following:

from the source of digital information receive a stream of digital information, which is divided into information-containing parts; then at least one information-containing part is provided with an electronic digital signature generated using a private private key, thereby obtaining genuine digital information, followed by

- 5 009450 genuine digital information, which is an electronic digital signature with an information-containing part, is checked for authenticity by verifying the electronic digital signature contained in it using a personal digital certificate.

2. The method according to claim 1, according to which a stream of digital information is obtained using a digital video camera or digital camera.

3. The method according to claim 1, according to which a stream of digital information is obtained using a microphone equipped with a unit for converting a sound signal into a stream of digital information.

4. The method according to claim 1, wherein the supply of the information-containing part with a digital signature and verification of authentic information for authenticity is carried out in real time with spatial separation of the place of supply and the place of verification.

5. The method according to claim 1, in which before checking the authentic information for authenticity, it is sent for temporary storage.

6. The method according to claim 4, in which before sending genuine information for temporary storage it is compressed.

7. The method according to claim 5, in which the genuine information sent for temporary storage is sent to the place of verification that is spatially remote from the place of supply of the information-containing part by electronic digital signature.

8. The method of obtaining genuine digital information, which consists in the following:

from the source of digital information receive a stream of digital information, which is divided into information-containing parts; then at least one information-containing part is provided with an electronic digital signature generated using the private private key, thereby obtaining genuine digital information.

9. The method of claim 8, according to which a stream of digital information is obtained using a digital video camera or digital camera.

10. The method according to claim 8, according to which a stream of digital information is obtained using a microphone equipped with a unit for converting a sound signal into a stream of digital information.

11. The method according to claim 8, in which the authentic information is sent for temporary storage.

12. The method according to claim 11, in which prior to sending genuine information for temporary storage it is compressed.

13. A device for obtaining genuine digital information, comprising a unit for receiving a stream of digital information and dividing it into information-containing parts, having an input for receiving a stream of digital information and an output for transmitting information-containing parts;

a unit for generating genuine information, which is an electronically signed information-containing part, containing:

a) the first input for receiving information-containing parts, communicated with the output for transmitting information-containing parts of the unit to receive a stream of digital information and divide it into information-containing parts,

b) a second input for a private private key communicated with the output of the unit for storing a personal private key and generating a digital signature using a private private key,

c) output for authentic information.

14. The device according to claim 13, further comprising a video signal conversion unit into a digital information stream comprising an input for receiving a video signal and an output for transmitting a digital information stream communicated with the input of the block for receiving a digital information stream and dividing it into information-containing parts.

15. The device according to claim 13, further comprising an audio signal conversion unit into a digital information stream comprising an input for receiving an audio signal and an output for transmitting a digital information stream communicated with the input of the block for receiving a digital information stream and dividing it into information-containing parts .

16. The device according to claim 13, further comprising a block for compressing the authentic information, comprising an input for receiving the authentic information, communicated with the output for the authentic information of the block for generating the authentic information.

17. The device according to claim 13, further comprising a unit for long-term storage of genuine information, comprising an input for receiving genuine information, communicated with an output for genuine information of the unit for generating genuine information.

18. The device according to clause 16, in which the unit for long-term storage of genuine information is made with the possibility of removal from the device to obtain genuine digital information.

- 6 009450

19. The device according to claim 13, wherein the unit for generating genuine information is provided with a real-time clock supplying the information-containing part in the unit for generating genuine digital information with a real-time tag.