RU2198993C1 - Method for protection of information - Google Patents

Abstract

FIELD: procedure of protection of information, for example, technical documentation kept in information storage and search systems. SUBSTANCE: the method for protection of information includes the protection of its storage or storage form and monitoring of the internal controlling mean protective with transmission of coded control commands by the protection system. For coding the access commands a constant password is preset. Just before the transmission of the message from the protection system a current single access key is received, and then the control commands are coded by the obtained access key and preliminarily set password. EFFECT: prevented use of intercepted key formed by the protection system for unauthorized access to the protected information. 1 dwg, 1 ex

Description

 The invention relates to techniques for protecting information, for example, technical documentation located in information storage and retrieval systems.

 A known method of protecting documents or valuable objects, including storing them in a container protected by a security system with a key, the operation of which is controlled by a fixed password (UK patent 2191534, CL E 05 B 39/04 of 12/16/1987).

 The disadvantage of this method is the low degree of protection of documents or valuable objects.

 A known method of protecting documents and valuable objects, including protecting their container with internal controls made in the form of devices with final logical states (Russian patent 2078894, class E 05 G 5/00 of 05/10/1997).

 The disadvantage of this method is the low degree of protection due to the possibility of establishing unauthorized control of internal controls during the security system by selecting an access key by enumerating possible key options, for example, using a computer.

 Closest to the technical nature of the present invention is a method of protecting information or valuable objects, including protecting their container, storage or content forms and controlling internal security controls made in the form of devices or programs with finite logical states, with the transfer of encrypted system control commands protection (patent of Russia 2178056, CL E 05 G 5/00 from 01/10/2002).

 The disadvantage of this method is the ability to intercept and unauthorized use of the generated key when sending it.

 A method for protecting information is proposed, including protecting its container or storage form and controlling internal security controls with the transmission of encrypted security system management commands, and according to the invention a permanent password is set for encrypting access commands, immediately before transmitting a message from the security system, they receive a current one-time access key and then encrypt the control commands for the received access key and pre-set password.

 The proposed security method prevents the possibility of using the intercepted key generated by the security system for unauthorized access to the protected information.

 To clarify the described method, a drawing is attached, which shows the proposed scheme for managing technical information protection devices.

 Access to containers 1 for storing information is provided by teams on internal communication lines 2 from the security control device 3 by client access keys. Through open communication lines 4, a one-time key is generated to the remote access control equipment 5 generated by the security control device 3. The client enters an individual access password set in advance, and the remote access control equipment 5 encrypts the client’s commands with the one-time key received from the security system 3 and the client’s password set in advance .

 Since when implementing this method, access keys are formed from constant and variable components, its implementation ensures, on the one hand, the impossibility of using accidentally or intentionally obtained disposable keys to generate commands on behalf of use, and, on the other hand, reliable identification of a user with a constant component of the access key.

 Example: A customer generates an individual password (key) for access to an information store that provides a sufficient degree of protection (for example, 4096 bits long) from the client’s point of view, and is transmitted in one way or another (in person or via closed communication lines, or from open communication lines to encrypted form) information storage protection management. The device that manages the protection of the information container generates a one-time key (for example, 1024 bits long) at the client’s request, which is transmitted to the client. The client encrypts the set of commands for managing access to the repository received by a one-time individual access key and a password set in advance by him, and then transfers them to the information protection management system.

 Thus, the proposed method of information protection allows you to remotely control the protection, independently set by customers the degree of information protection, provides user identification and protection against unauthorized use of intercepted keys.

Claims (1)

 A method of protecting information, including protecting its container or storage form and controlling internal security controls with the transmission of encrypted security system management commands, characterized in that a permanent password is set for encrypting access commands, and the current one-time access key is received from the security system immediately before transmission and then encrypt the control commands for the received access key and pre-set password.