Distributed processing of a product on the basis of centrally encrypted stored data
AssigneeGiesecke+Devrient Mobile Security GmbH
InventorsFrank-Michael KAMM, Volker STÖHR
Life of this patent
Estimating the term…
Abstract
The invention provides a system for encryptedly storing product data of a product having an attached tag centrally on a product data server, and reading out the centrally stored product data by production stations which are to process the product. The product data are encrypted with a document key which in turn is encrypted with a public key of the tag. The tag contains access information for the centrally stored product data. When a production station accesses product data on the product data server, the tag carries out a re-encryption of the document key from the key system of the tag to that of the accessing production station.
Claims16
1-14. (canceled)
A system for processing, in particular storing and reading out, product data, comprising:
- a product data server on which a product data file is stored or storable, in which are comprised:
- the product data in a form encrypted with a document key, and
- the document key in a form encrypted with a public key of an asymmetric key pair;
- a product;
- a tag, attached to the product, in which access information is stored or storable for the product data file on the product data server;
- at least one production station or several production stations which are devised for processing the product according to the product data;
- wherein
- an asymmetric key pair is stored in the tag, comprising a private tag key and a public tag key, wherein the private tag key is inaccessible to the production station;
- an asymmetric key pair is stored in the production station comprising a private station key and a public station key;
- an encryption device is devised in the tag;
- the document key is encrypted in the product data file on the product data server with the public tag key.
A tag, attached to or attachable to a product, devised to enable a production station to process, in particular store and read out, encrypted product data from a product data server to the production station;
- wherein on the product data server a product data file is stored or storable, in which are comprised:
- product data in a form encrypted with a document key, and
- the document key in a form encrypted with a public key of an asymmetric key pair;
- wherein in the tag access information is stored or storable for the product data file on the product data server;
- wherein
- an asymmetric key pair is stored in the tag, comprising a private tag key and a public tag key, wherein the private tag key is inaccessible to the production station;
- the document key in the product data file on the product data server is encrypted with the public tag key, as an encrypted document key;
- In the tag an encryption device is provided which is devised for:
- upon a storing of product data, encrypted with the document key by the production station on the product data server:
- supplying the public tag key to the production station for encrypting the document key;
- upon a reading out of the product data file from the product server to the production station while employing the access information from the tag, re-encrypting the encrypted document key from the public tag key to the public station key and supplying the hereby re-encrypted document key to the production station.
Dependencies are inferred from the claim text.