DE102007005675A1 - Electronic business card - Google Patents

Abstract

The present invention relates to a method for transmitting data via a communication link between at least two communication devices, wherein the communication devices are each connected to a data carrier, characterized in that at connection recording at least one data carrier establishes a communication link to at least one other data carrier for data transmission, the volume that establishes a communication link to at least one other volume for retrieving data from another volume, after establishing the communication connection, first identifies itself to the other volume, and then in response to a rights management system present in each volume which is determined which other data carriers on which data of the data carrier has an access right, the requested data according to the access authorization of the requesting data carrier a n the requesting data carrier to be transmitted, wherein the data carrier before the transfer negotiate a transfer key for the data and transmit encrypted after negotiating the transfer key, the data to be transmitted. Furthermore, the present invention apparently a device corresponding to the described method.

Description

The The present invention relates to a method of transmission of data over a communication link between at least two communication devices, wherein the communication devices are each connected to a disk in which data are stored by the respective user. In particular, acts the data is personal data, such as B. occur in electronic business cards.

electronic Business cards are in the art z. B. of mobile phones or known by emails. The user can use his mobile phone Send an electronic business card by SMS to a specific person. The electronic business card is stored in the SIM card of the mobile phone. In the Internet area, the user can use his electronic business card send by email. The data of the electronic business card are z. B. stored on a workstation.

to Distribution of electronic business cards sent the owner electronic business card a copy of the electronic business card per SMS or by email. Another way of dissemination The electronic business card is that the data of the electronic business card can be distributed externally. This means that the data of the electronic business card, such as As name, address, phone number, etc. on a server, eg. As a server after the so-called Lightweight directory access protocoll (LDAP) are stored. On this server can then be accessed by third parties if they stored there Want to retrieve electronic business card data. The data of the electronic business cards are then from the server externally administrated and distributed.

To the receipt of the electronic business card on the mobile phone or the computer must then manually copy the data or be entered, which is error prone. The entered Data can then be used on the mobile phone, for example in case of a call with the transferred telephone number one Name of the address book and instead of the phone number to display the name.

EP 1 444 846 B1 discloses a method for enabling a user to handle a personalization object received from a first communication terminal on a second communication terminal while the communication terminals are in a state of establishment of a call or in the state of a call Call are located. This comprises the steps of sending a personalization object to the second terminal by the first terminal and receiving and temporarily storing the personalization object by the second terminal, wherein alerting the user by the second terminal about obtaining the personalization object and allowing the user select whether the received personalization object is rejected or executed in the second terminal.

Further disclosed EP 1 444 846 B1 a method and apparatus differing from the method described above only by the steps of initiating a call from the first terminal, the first terminal having a plurality of settings that are user settable to handle an outgoing personalization object, including a "ask first" setting and with this step asking the user whether or not to send a personalization object when the "first ask" setting of the first terminal is active.

The US 2005/0135294 A1 discloses a mobile communication system and method for exchanging data packets between a host of a mobile communication terminal and at least one client of a mobile communication terminal. The host sends an SMS message containing a list of data to be provided and an IP address for the data packet communication. At least one client sends to the host a list of data whose transmission is requested for download and authentication information over PPP channels established for data packet communication. The host then sends the data requested by the client over the PPP channels to the client. Therefore, the data can be exchanged between the host and the client without using a separate device or device for data exchange.

adversely In the prior art is that the exchange of electronic Data, in particular of electronic business cards, only by the instigation of the owner of the data happens. A safe Data transmission is furthermore not in the prior art guaranteed.

Therefore it is the object of the present invention is a simplified and secure retrieval of data with a release management of the data to be queried after a connection between at least two communication devices available to deliver.

The Object of the present invention is characterized by the independent Claims 1 and 11 solved. Advantageous embodiments are mentioned in the subclaims.

The The present invention discloses a solution to the problem Task a method for transferring data via a communication link between at least two communication devices, wherein the communication devices each with a data carrier are connected, and when connecting at least one disk a communication connection to at least one other medium for a data transmission, wherein the data carrier, the one communication connection to at least one other data carrier builds to retrieve data from another volume, after establishing the communication connection, facing each other authenticated to the other volume, and then dependent from a rights management system included in each volume is present, which determines which other disk on which data of the data carrier has an access right, the requested data according to the access authorization of the requesting data carrier to the requesting disk transfer be, taking the disk before transfer a transfer key for the data negotiate and after negotiating the transfer key transmit the data to be transmitted in encrypted form.

Advantageous The method of the present invention is that a direct Communication between the disks is present. The entire process of communication from establishing the communication connection, the data transmission and the removal of the communication link is exclusively from the disks without Involvement of the communication devices with which the data carriers connected, controlled. For a secure data transfer to ensure the data is only in the disk even encrypted before they are protected Leave environment of the disk. After receiving the Data will then be back in the secure environment of the data other disk decompresses before processing become. Thus, a secure data transfer over unsafe transmission media, such. B. the Internet guaranteed become.

Of the The communication process can be triggered by the Presence and type of a usable communication channel at least one disk, for example by an IP address and a port of a communication partner. The decision as to whether to perform a data update and for that a connection is to be built, goes thereby from the disk itself.

Of the Owner of the disk can with the help of the rights management system In addition, determine which other user or its data carrier on which data of its data carrier receives an access. The administration of the data has it the owner completely in his hand.

Of the Owner has z. B. the possibility of owning a data assigned to a particular class. By granting certain access rights to a class is z. B. a ring-like exchange of data entries possible with family members, business partners etc.

Further can by assigning additional data, z. B. warm the data last updated or until when the data is valid are to be taken influence on the data management by determining warm z. B. an update of the in the media stored data automatically after establishing a communication connection depending on the date of the last change the data or the expiry date of the data has to take place. This has the advantage of being the user neither worry about sharing nor updating data got to. The present invention thus provides a clear Facilitate work and simplify data exchange.

sense and purpose of the present method is both the simplified manual as well as simplified automated data exchange between at least two data carriers. An example for is an electronic business card. When exchanging electronic Business cards are like personal business cards in paper form Data exchanged and stored between two persons. To yourself to make sure that the data once stored is still current can, the present method, as described above, to do so be used to automatically retrieve the data of other people and to make the appropriate updates as needed.

Vice versa it is with the present invention z. B. also possible based on the stored electronic business cards at a Moving certain electronic business cards and thus the associated ones Select people and so on the new address to inform. The electronic business card is only one possible embodiment. In addition to the electronic Business card, there are countless examples of the application of the present invention, for. B. the use of present invention for processing payment transactions, that z. B. a credit institution is entitled to the necessary To retrieve account data.

An essential feature of the present invention is that the entire data processing, encryption and decryption and storage of the data takes place in the respective data carriers themselves. Thus the data processing finds itself in a secure environment. Furthermore, the communication devices are relieved of the data processing in which the data carriers are located. This manifests itself in a simpler structure of the communication devices and thus a more favorable production price.

to Ensuring secure data transmission Different options are available. To ensure that the receiver The data can also be sure that the data is real come from the requested volume, the transferred Data provided with a signature. To further increase Data security in data transmission will be the Data encrypted with a public-key certificate. In addition to the Signature and the public-key certificate are all other procedures suitable for the security of data transmission over an unsafe medium, such as B. ensure the Internet.

As already indicated above, the present invention has the advantage that not only from your own data carrier can be queried from another medium, but also from the other disk your own data can be queried, the transmission the data always in dependence of the assigned respective Access rights. This means that the present Invention has the advantage that the data transmission between the data carriers both uni- and bidirectional can be.

The means that those involved in the communication link Data carriers are capable of both mutually the data exchange as well as that only data from a communication partner receive, but this does not receive data from yourself, which also provides the security of a data transmission elevated.

The The present invention is applicable to both wired and wireless also suitable for wireless communication connections. As the best known example of a wired communication link here is the internet, as an example of a connection in a packet-switched network, and for a wireless Communication connection to call the mobile network. Generally is true that the use of the present invention is not depending on whether it is a wireless or a wired Communication system acts.

When come to use for the invention disk Smart cards or USB tokens or another secure medium into consideration, for. B. Trusted Base in TPM etc. These have the advantage that they relatively small, light and inexpensive to manufacture are. In addition, all data carriers are eligible for the use in the invention are suitable to store data and process. Also a realization of the data medium in software is possible.

In summary the method of the present invention has the advantages that the Access to the data fast, uncomplicated, error-free, up-to-date and certainly happens.

The Administration or administration of access rights is done by the owner and thus user of the volume.

in the Case of a denied authentication gives the disk an alarm signal off. In the denied authentication can this is a proper first-time connection request act, as well as a manipulation attempt. The user of the volume can then decide how to proceed.

Of the User is used when managing access rights after or during supported the first connection attempt.

Next The method discussed above is the object of the present Invention also by a device for transmission of data over a communication link between at least two communication devices are solved, wherein the communication devices each connected to a disk, which thereby is characterized in that the data carriers respectively a device for establishing a communication connection and the Data exchange between the data carriers of the communication devices each have a device for Rights management for the stored in a database Have data to the respective user of the data carrier to be able to determine who is on what data of his Disk which has access rights, and the disks a device to a transmission key to negotiate for the data, and the volumes a device to the data to be transmitted with the negotiated transfer key too encrypt.

In terms of the advantages of the device are those discussed above for the method Advantages analog.

in the The present invention is based on the closer described figures are described, wherein

1 represents the principle of the present invention and

2 on the one hand an exemplary structure of the database 4 . 18 of the disk 2 . 16 one electronic business card and on the other hand, the possibilities in which direction which data from and to the disk 2 . 16 can be transmitted.

1 represents the principle of the present invention. For reasons of clarity, the communication devices were not shown, but only the disk 2 . 16 , It is expressly pointed out that the data carriers described below 2 . 16 are each connected to a communication device, wherein the communication devices with a transmission medium 12 are connected.

In 1 is a first volume 2 represented by an insecure medium 12 , z. B. Internet, with a second disk 16 connected is.

Each volume 2 . 16 has a database 4 . 18 for storing data, a rights management system 6 . 20 to manage the access rights to the data, and an encryption module 8th . 22 to encrypt the data to be sent or to decrypt the data to be received.

Essential to the present invention is that the connection between the data carriers 2 . 16 from the data carriers 2 . 16 is self-built and exists only between them.

Will now disk 16 on the data from disk 2 access, so checked disk 2 based on the identification of data carrier 16 first the access rights of disk 16 by means of the rights management 6 , Depending on the access rights then receives disk 16 an access to the data from disk 2 ,

However, it is generally noted that the owner of a disk 2 . 16 not only can determine which volume can access its data, but also which volume on which data in the database 4 . 18 may access. Thus, also through the rights management 6 to be determined on which data of the database 4 the disk 16 may access.

If now it is determined that the disk 16 is allowed to access the desired data, then is between the disk 2 . 16 a transmission key is arranged, based on which the data to be transmitted before being transmitted in the encryption module 8th be encrypted. Thus, a secure transmission over an insecure medium 12 , such as As the Internet can be guaranteed.

Receives the disk 16 the transmitted data, then the transmitted data first in the encryption module 22 decrypted. Thereafter, the decrypted data in the database 18 stored.

Analog is the disk 2 able to data the database 18 of the disk 16 access.

According to the invention, it is possible that both data carriers 2 . 16 each other, one after the other or simultaneously on the data of the database 4 . 18 of the other volume 2 . 16 access.

2 on the one hand shows a structure of the database 4 . 18 of the disk 2 . 16 on the example of an electronic business card and on the other hand, the possibilities in which direction which data from and to the disk 2 . 16 can be transmitted.

As described above, there is the disk 2 . 16 from an encryption module 8th . 22 , a rights administration 6 . 20 and a database 4 . 18 that z. As an address book, which contains valid, ie current data from electronic business cards. The current data, so-called contact data, may be distinguished into the user's own data, here referred to as "My Business Card:", and the data obtained from other persons, here referred to as "My Address Book Entries:" ,

As common in business cards in paper form, contains also the electronic business card the name of the user. Next his name, his address, telephone number, email address, Homepage, etc. conceivable personal data.

Around Determine if the business card is really direct from the owner comes from the business card, the business card contains a certificate. Should a recipient take the business card to a third party pass on the certificate will be changed. Based on the changed certificate, the third party can then determine that he The business card is not received directly from the owner of the business card and that the content of the business card may change has been.

Furthermore the last update date is on the business card. This can be the owner and the recipient of the Establish business card, warm the business card data for the last time have been updated.

In addition, the owner of the business card can also determine their validity. An essential feature of the present invention is that the owner of the business card can specify different access classes. This means that the Besit can define who may have access to which data. For example, in the access class private, it can be determined which family member has access to the data of the access-Info access class. In the access class business, it can be determined which business partner is responsible for business data, such as business data. For example, a business phone number or business address may also access the private data.

In the access class payment info data can be set, which are important for the settlement of a payment transaction, z. B. Account number and bank code or validity of Credit card, and which bank may access it. Instead of a bank is also an internet shop or a service conceivable that is allowed to access the payment info.

In addition to the data of your own business card, the database 4 . 18 , here in the form of an address book, also contain data or address book entries of other persons.

When First, the address book entries contain the business card information other persons, such as Name, address, phone number, email address, Etc.

Next This data contains the address book entries for secure transmission of data to the public Key, the certificate or the signature of the contact person.

Around To determine from the warm data are the address book entries the last update date and the expiration date the data of the contact person.

Furthermore is stored in the address book, which allowed access class, d. H. Access rights, the owner of the address book on the data of Contact person has. For example, the owner of the address book may act as a business partner only on the business, but not on the private Data of the contact person have access.

In addition to the structure of the data carrier 2 . 16 is in 2 also listed the type and direction of the exchanged data.

According to the present invention, it is possible that the data carrier 2 . 16 automatically with one in the database 4 . 18 stored connection partner or contact person queries the current data.

Further can over a communication network, eg. Internet, from another disk with business card feature or by other inquiry services the data of the business card, z. As the address, the owner of the business card are queried. To must be the other disk or query service identify. This identification is z. B. possible by the other disk or query service its own electronic business card or your own certificate. To Verification of identity and access rights by the database of the owner of the data is then the other volume or query service accesses the data in accordance with the granted the access class defined access rights.

If the other volume or query service has an access right on certain data of the disk, then the to be issued encrypted and signed data to the transferred to another data carrier or query service. Thus, also via an insecure transmission medium, z. B. Internet, ensures secure data transmission.

Essential in the present invention, the owner of the Data carrier using a computer, the data of the data carrier, here the data of an address book, query, read and change, and thus the administration of the data in the hands of the owner lies.

A Further application of the present invention is the use of the invention, for. B. in the telephone network, if indeed can still call the fire department or police, but no longer in the Able to speak. When using the present invention it would be possible for police or fire department by determining the address from the disk to determine where the caller is and to send help.

requirement for that is that caller and police or fire department have corresponding technical devices which retrieve allow the data and the owner firefighters or police to Retrieving the data has authorized

QUOTES INCLUDE IN THE DESCRIPTION

This list The documents listed by the applicant have been automated generated and is solely for better information recorded by the reader. The list is not part of the German Patent or utility model application. The DPMA takes over no liability for any errors or omissions.

Cited patent literature

• - EP 1444846 B1 [0005, 0006]
• US 2005/0135294 A1 [0007]

Claims (13)

Method for transmitting data over a communication link ( 12 ) between at least two communication devices, the communication devices each with a data carrier ( 2 . 16 ), characterized in that at connection recording at least one data carrier ( 2 . 16 ) a communication connection to at least one other data carrier ( 2 . 16 ) for a data transmission, wherein the data carrier ( 2 . 16 ), which has a communication connection ( 2 . 16 ) to at least one other medium ( 2 . 16 ), after establishing the communication connection ( 12 ) compared to the other data carrier ( 2 . 16 ), and then depending on a rights management system ( 6 . 20 ) contained in each volume ( 2 . 16 ), the requested data according to the access authorization of the requesting data medium ( 2 . 16 ) to the requesting data carrier ( 2 . 16 ) be transmitted. Method according to Claim 1, characterized in that the data carriers ( 2 . 16 ) negotiate a transmission key for the data before transmission and, after negotiating the transmission key, transmit the data to be transmitted in encrypted form. Method according to claim 1, characterized in that that the data automatically depends on their validity or the last modification date Can be requested. Method according to claim 1, characterized in that that the data processing, in particular the encryption and the decryption of the data, respectively in the data carriers itself takes place. Method according to claim 4, characterized in that that the data is provided with a signature. Method according to claim 4, characterized in that that the data provided with a public-key certificate become. Method according to Claim 1, characterized in that the data transmission between the data carriers ( 2 . 16 ) is uni- or bidirectional. Method according to Claim 1, characterized in that the communication link ( 12 ) a wired and / or wireless connection is used. Method according to Claim 8, characterized in that the communication link ( 12 ) an internet connection is used. Method according to Claim 1, characterized in that the data carrier ( 2 . 16 ) a smart card or USB token or other secure medium is used. Device for transmitting data via a communication link ( 12 ) between at least two communication devices, the communication devices each with a data carrier ( 2 . 16 ), characterized in that the data carriers ( 2 . 16 ) in each case a device for establishing a communication connection and for data exchange between the data carriers ( 2 . 16 ) of the communication devices, and the data carriers each have a device for managing rights ( 6 . 20 ) for in a database ( 4 . 18 ) stored data to the respective user of the data carrier ( 2 . 16 ) to specify who is to access which data on his data medium ( 2 . 16 ) which has access rights, and the data carriers have a device for negotiating a transfer key for the data, and the data carriers comprise a device ( 8th . 22 ) to encrypt the data to be transmitted with the negotiated transmission key. Apparatus according to claim 10, characterized in that the data carrier ( 2 . 16 ) is a smart card or USB token or other secure medium. Method according to Claim 10, characterized in that the communication connection ( 12 ) is an internet connection.