| 摘要 |
<p>The invention concerns a method for secure data exchange between two locally interconnected devices. In a preferred embodiment, the first device (10) is a security module containing a first encryption key, called private key (PAKV) of a pair of asymmetric encryption keys. The second device is a receiver (11) comprising at least a second encryption key, called public key (PAKB) of said pair of asymmetric encryption keys. Each of the devices further comprises a symmetric key (13). The first device (10) generates a first random number (A) which is encrypted by means of the private key (PAKV), then transmitted to the second device (11), wherein it is decrypted by means of the public key (PAKB). The second device (11) generates a second random number (B) which is encrypted by means of said public key (PAKB), then transmitted to the first device (10), wherein it is decrypted by means of the private key (PAKV). A session key (SK), used for secure data exchanges, is generated by a combination of the symmetric key and the random numbers (A, B) generated and received by each of the devices.</p> |
