Method and arrangement for configuring electronic devices
View Patent ↗The invention relates to a method for configuring electronic devices, particularly terminals, wherein during configuration at least parts of first configuration data on a chip card are fed to an electronic device, wherein the configuration data are stored on the chip card as second configuration data such that the stored data are the result of an obfuscation following at least one first algorithm. Furthermore, at least parts of the first algorithm can be derived by the electronic device. The stored second configuration data are subjected to a de-obfuscation by the device such that, having knowledge of the first algorithm, they can be reconstructed as first configuration data and the configuration of the terminal can be based thereon. The invention further relates to an arrangement having means for carrying out the method.
1. A method for configuring an electronic device, wherein during configuration at least parts of configuration data on a chip card are fed to the electronic device, the method comprising:
a) obfuscating first configuration data by encrypting the first configuration data in accordance with a first algorithm to transform the first configuration data into second configuration data having a first structure;
b) further obfuscating the second configuration data by resolving the first structure of the second configuration data to save the second configuration data in a second structure that is different from the first structure;
c) saving the second configuration data in the second structure in non-transitory storage memory of the chip card;
d) subjecting the stored second configuration data to de-obfuscation to reverse the encryption of the second configuration data to transform the second configuration data into the first configuration data; and
configuring the electronic device based on said first configuration data after the second configuration data is subjected to the de-obfuscation and is transformed into the first configuration data.
2. The method of claim 1 , wherein the further obfuscating of the second configuration data comprises adding dummy records to the second configuration data.
3. The method of claim 1 , wherein the obfuscating of the first configuration data by encrypting the first configuration data in accordance with a first algorithm is based on a first key and a first initialization vector; and
wherein subjecting the stored second configuration data to de-obfuscation to reverse the encryption of the second configuration data comprises deriving the first initialization vector from the stored second configuration data and subsequently using the first initialization vector to reverse the encryption of the second configuration data.
4. The method of claim 3 , wherein the first key is a symmetrical encryption key.
5. The method of claim 3 , comprising:
storing the first initialization vector in the non-transitory storage memory of the chip card.
6. The method of claim 3 , comprising implementing in the electronic device a second algorithm, which is performed by the electronic device to identify the first initialization vector.
7. The method of claim 3 , comprising identifying the first initialization vector based on at least one piece of information stored on the chip card.
8. The method of claim 3 , comprising detecting the first initialization vector based on at least one attribute of the chip card.
9. The method of claim 3 , comprising storing the first initialization vector on the electronic device.
10. A system for configuring a terminal, wherein during configuration of the terminal at least parts of first configuration data on a chip card are fed to the terminal, the system comprising:
a terminal, said terminal comprising a card reader;
a chip card storing configuration information in non-transitory memory of the chip card for configuring the terminal, said configuration information being encrypted in accordance with a first algorithm based on a first key and a first initialization vector and being stored in a first structure;
the terminal being configured to de-obfuscate the encrypted configuration information stored on the chip card to derive the first initialization vector and reverse the encryption of the configuration information based on the derived initialization vector for access to the configuration information for configuration of the terminal.
11. A method for configuring a terminal, the method comprising:
obfuscating first configuration data by an encryption of the first configuration data in accordance with a first algorithm based on a first key and a first initialization vector to transform the first configuration data into second configuration data having a first structure;
further obfuscating the second configuration data by resolving the first structure of the second configuration data to save the second configuration data in a second structure that is different from the first structure;
adding dummy records to the second configuration data;
saving the second configuration data in the second structure with the added dummy records in a public data section of a non-transitory storage memory of a chip card;
de-obfuscating the second configuration data stored in the public data section of the non-transitory storage memory of the chip card to reverse the encryption of the second configuration data to transform the second configuration data into the first configuration data; and
configuring the terminal based on the first configuration data after the second configuration data is de-obfuscated to be transformed into the first configuration data.
12. The method of claim 11 , wherein the de-obfuscating of the second configuration data comprises:
deriving the first initialization vector by the terminal after the terminal accesses the second configuration data stored on the chip card,
reversing the encryption of the second configuration data by the terminal based on the derived first initialization vector and an encryption key.
13. The method of claim 12 , wherein the encryption key used during the reversing of the encryption of the second configuration data by the terminal is stored in the terminal and is symmetrical with the first key.
14. The method of claim 12 , wherein the first structure is a single file and the second structure is a plurality of files that include the added dummy records.
15. The method of claim 14 , wherein the dummy records are comprised of random numbers or random data.
16. The method of claim 11 , wherein the de-obfuscating of the second configuration data comprises:
deriving the first initialization vector by the terminal after the terminal accesses the second configuration data stored on the chip card,
identifying, by the terminal, the first algorithm, and
reversing the encryption of the second configuration data by the terminal based on the identified first algorithm.
17. The method of claim 16 , wherein an entirety of the first algorithm is identified by the terminal during the de-obfuscating of the second configuration data.
18. The method of claim 16 , wherein the first structure is a single file and the second structure is a plurality of files that include the added dummy records.
19. The method of claim 18 , wherein the dummy records are comprised of random numbers or random data.