DE10255163A1 - Computer implemented discount system in which the offerer of a discount assigns part keys to a user with each purchase of appropriate goods and the user then assembles a unique secret discount offer key from his part keys - Google Patents

Abstract

Method for operating a rebate or discount system in which the discount offerer associates a unique secret key (S) with each discount. An assignment function is then used to construct the key from a group of part keys, each associated with a goods item. Thus if a user purchases enough goods each with a part key, he will then be able to construct or assemble a full discount key and so obtain the offered discount. An Independent claim is made for a device for implementation of an electronic discount system. The invention also relates to a corresponding implementation software product.

Description

The invention relates to a method and a device for improved operation of a discount and / or Addition system and an implementation software product, which to carry out the Procedure is designed accordingly.

As is known, there are many different types Variants of discount and / or addition systems. For example, gets a customer if he has a predetermined number of any number of different Buys goods, a free encore or the next purchase a discount of x%. It is also conceivable that he would give a free encore and / or get a discount, if he gets one from a group X. defined number of goods, including any number of different goods, and from group Y also buys a defined number of goods. The same can be provided if the customer has a defined one Number of any different goods and a certain goods Z buys or when a customer U and a defined number of goods buys a defined number of goods V.

Of course, such discount and / or Addition systems also based on services provided by the customer uses, imaginable. Correspondingly, the respectively provided ones can also be used Discounts and / or allowances exist for goods and / or services.

The general term of a discount accordingly includes in the present description and the appended claims, if no special discount is described, not just a discount, but generally also an addition, especially in the form of a free reward provided goods and / or services, including the granting a discount in the form of a credit.

Services are accordingly from the general concept of the goods, unless a special goods is described in the following description and the appended claims to be considered as included.

Usually such discount and / or addition systems are managed the following way. The owner of the goods or the provider of services sets the rules on how discounts and / or allowances are granted should, as exemplified above. When buying a product and / or the customer receives a service or when using a service according to the set Rules conventionally sort of bonus points so that when he gets enough bonus points collected the discount and / or the free reward.

A particular problem here is the administration of such discount and / or addition systems. The central one Storage of bonus points for Every customer, for example, can do a lot with a large number of customers become complex. Furthermore, in the case of central storage, there are usually To comply with data protection requirements, which may be significant Cause problems can.

On the other hand, the bonus points collected and / or stored at the customer's are depending on the one specific design of the discount and / or addition system extensive activities across from undesirable Manipulations are necessary and on the other hand, the submission of bonus points at a central to redeem become very expensive. It is particularly important to take into account that such requests are processed for redemption Need to become and therefore at a considerable time and thus cost lead, especially when granting the discount and / or the addition takes place according to complicated rules and thus results in complex processing.

The object of the invention is a to show new and improved way with which shown above Problems and disadvantages of the prior art at least essentially be reduced and with which with reduced effort, in particular reduced technical effort on the part of the provider of the goods and / or services and in a significantly simplified manner and therefore often cost-effective Way an improved operation of discount and / or addition systems with simultaneous warranty a high level of security is achieved.

The achievement of the object is through a method with the features of claim 1, by a device with the features of claim 20 and a software implementation product with the features of claim 38.

Advantageous and / or preferred versions or further developments are the subject of the respective subclaims.

According to the invention, in order to operate a discount system, it is provided that at least one secret key is uniquely assigned to a discount provided by the provider of the discount system, using an assignment function a group of subkeys assigned to the key for a necessary number of subkeys from the group that is defined for the reconstruction of the key is generated by sub-keys, the sub-keys of such a group of sub-keys are assigned to goods from a group of goods, and if a product from the group of goods is used with authorization, the at least one sub-key assigned to this product sel is transferred to a facility required by the user to use the discount system.

It is particularly advantageous here that both the storage of to obtain a discount necessary bonus points as well as the determination of a discount, if necessary. depending on the specific area of application, the redemption of the Bonus points can be carried out directly at the customer. In this regard therefore no connection to the operator of the discount system is necessary. A central storage of bonus points as well as complex processing for grant of a discount and upon redemption the bonus points are therefore eliminated.

In particular, is more advantageous Training provided to generate the subkey use so-called secret sharing procedures. In this way is essentially any manipulation in obtaining a Discounts and / or an encore can be excluded.

Are the means of doing this more preferred Further training from the operator of the discount and / or addition system associated device can essentially any Discount and / or Addition rules on the part of the operator of the discount and / or addition system can be easily defined without the operator having an administrative facility for surveillance the defined discount and / or addition rules required. So is in particular further provided that the user of the discount and / or Addition system means for reconstructing one by one Secret sharing process based on a number of goods and / or Distributed secret key services is provided with means for reconstructing the by the operator associated distributed key facility, particularly on the Based on a number of partial keys determined by the operator.

This to the user of the discount and / or addition system For this purpose, the assigned device expediently comprises means to be dependent of goods and / or services from a group of goods and / or Sub-keys transferred by the operator facility received, and to detect, based on the predeterminable, necessary number of subkeys for one Group of subkeys common key to win, using a clearly the group of partial keys assigned key can be determined.

In further training it is also proposed that using the facility necessary to use the discount system of the user in response to the use of goods from the group partial keys assigned to goods are captured based on the specified number of captured partial keys the for the group of subkeys common key is reconstructed, and using the key Discount identified by the provider of the discount system becomes.

Preferably, the device assigned to the user has a memory for temporary storage recorded partial key and / or reconstructed key, so that the use of the discount and / or addition system, i.e. the Detection of partial keys, until one of the partial keys assigned secret key can be determined via a longer one Guaranteed period is.

After using the partial key and / or key this in a preferred embodiment on the part of the user device deleted again, to prevent repeated redemption.

To the method according to the invention to implement in a simple manner is preferably provided the device according to the invention, in particular that assigned to the user of the discount and / or addition system Setup with a microprocessor and / or with a corresponding trained software to provide the desired Rules drawn up by the operator of the discount and / or addition system can be trained accordingly and / or can be reprogrammed.

This ensures that a user or customer by means of the device assigned to him, for example the subkeys described above, which the operator of the Sends discount and / or addition system to the customer, for example when purchasing a product and / or service in response to the respective used assignment function can detect, and in sequence one Key, for the corresponding decryption and / or identification of an addition, if any suitable amount of partial keys saved, i.e. collected and recorded or selected accordingly is.

To the customer or the one assigned to him Setting up bonus points from the operator when purchasing a product and / or Performance according to desired Transferring rules of the discount and / or addition system is expedient further provided that by means of an appropriately trained, device assigned to the operator before generating the assigned device subkey the key reconstruction necessary number of partial keys fixed and the assignment function in response to the specified number provided.

According to the invention, it is also advantageous suggested that as a key depending on the specific training or field of application of the discount system according to the invention a product and / or service itself, and / or an optical, acoustic, cryptographic and / or mathematical information is used and / or a code comprising such information is generated becomes.

If, for example, a product and / or service itself is intended as a discount and / or bonus, Which can be included in the group of goods to which the partial keys are assigned, the invention further provides, in an advantageous further development, that these goods are encrypted, and the assigned key by the user device required to use the discount system for decrypting the Goods are reconstructed.

The facility assigned to the operator includes thus in expedient trained to generate a key decrypting this commodity Medium.

In particular, to essentially any discount and / or Addition rule with the inventive method and the inventive device implement and / or to implement a variety of different types of To ensure discount systems in parallel, sees the invention beyond that the facility necessary to use the discount system the user's data for reconstruction verification so that, for example, related subkeys are easily recognizable.

This makes the discount according to the invention suitable and / or addition system, in particular for use or provision various digital content, such as films or music that over the internet are distributed so that the customer can use an encrypted Content that he can only get for free with a suitable one key can use.

Especially for such an application the invention further provides the means for generating the key as well expediently the corresponding means assigned to the device of the user for Reconstruct the key train such that the transfer to the user facility required to use the discount system using a communication network, especially one Intranet, the Internet, a cellular, telephone, radio and / or TV network takes place.

Furthermore, a preferred continuation is provided that the goods are made available on a platform, and the User device for using at least one of the goods on the Platform accesses.

Depending on the area of application and / or used The assignment function is also intended to give preference to the facilities to be designed such that the partial keys assigned to the goods can be transmitted in encrypted form and possibly the device assigned to the user, in particular the included hardware and / or software against external manipulation accordingly is secured to prevent multiple customers or Connect users and their subkeys change.

Furthermore, according to a preferred embodiment provided that a sub-key is assigned to a commodity from the group of commodities as well as according to a another preferred embodiment, that a partial key assignable to several goods from the group of goods and / or services is.

According to the invention is also beyond provided that a product intended as a discount and / or addition and / or performance multiple keys are assignable, so that in practice, for example, one Application can be guaranteed in this way is that different ways to the same reward, so the same Discount and / or lead to the same encore.

The assignment of the subkeys can here even, weighted, for example, more expensive goods in terms of obtaining the discount stronger too consider than cheaper Goods, or random respectively.

In addition, a combination to ensure multiple collections is provided according to further improved embodiments that the a discount provided by the provider of the discount system key that is assigned to another key as a subkey or that a subkey assigned to a secret key as another key used which in turn is a subkey be assigned.

In alternative or supplementary Execution is further proposed that mutually canceling partial keys can be generated are and / or partial keys are generated, the at least one of a further assignment function assigned subkey to replace, for example, the invention within a sweepstake use.

In appropriate training the user equipment required to use the discount system preferably designed in such a way after reconstruction of the associated key immediately decrypt the discount, display it and / or to use.

The user device recognizes in a practical manner furthermore, in particular under appropriate control by the verification information as to whether a reconstructed key is subkey within a further group of partial keys for the reconstruction of a for the another group of subkeys common key is to be used.

The facility associated with the user is accordingly designed or adaptable in such a way that a reconstructed secret key for the unique identification and / or decryption of a discount and / or Addition of intended goods and / or services can be used to for grant the reward according to complicated discount and / or addition rules necessarily to significantly reduce time spent on processing or on pages of the operator completely to avoid.

In addition, the device assigned to the user is expediently designed in this way forms that in particular otherwise a reconstructed key is recognized as a further partial key and can be used or processed accordingly within a further group of partial keys to form a key common to the further group of partial keys.

According to the invention, the proposed one Device related to the device associated with the operator thus in particular means for clearly assigning at least one Key too a discount, means for generating a group of keys Subkeys under Using an assignment function, means for assigning the partial keys to a such a group of subkeys Goods from a group of goods, and means of transfer of a partial key assigned to a product to use the discount system necessary setup of the user in response to an authorized Use of this product and is also preferred to encrypt the subkey educated.

Preferably includes the one assigned to the operator Setup means to choose an assignment function depending a defined or definable necessary number of partial keys for Reconstruction of the key as well as additionally or alternatively means for assigning several subkeys to one Goods and / or for particular selectable, for example weighted or random assignment of a partial key to several goods from the group of goods.

Are in practical training about that In addition, means are provided for converting a partial key into a key, which in turn is a subkey are assignable and / or by means of converting a key into a partial key that another key is assignable.

In a further preferred embodiment the device assigned to the operator for assigning several key trained a discount.

Furthermore, the provider and / or Devices assigned to the user expediently for processing of keys and / or designed to process partial keys, the optical, include acoustic and / or mathematical information.

This preferably includes the user assigned device means for detecting goods assigned partial keys and means for verifying a common one for a group of subkeys Assignment function, it is also provided that the assigned to the user Means for identifying and / or decrypting a device Discounts included based on the reconstructed key.

In the preferably by means of a Communication network connectable devices in preferred Design at least the necessary to use the discount system User device user-individual means and / or a variety of Commonly accessible to users Means so the invention for a variety of different applications can be used.

The invention also proposes an implementation software product before that for performing the method according to the invention and in particular for implementation in a device according to the invention is adjusted accordingly.

The invention is described below selected, preferred embodiments exemplified and described in more detail with reference to the accompanying drawings.

The drawings show:

1 2 shows a schematic flowchart with regard to an exemplary use of a discount system according to the method according to the invention, and

2 a schematic schematic diagram for modeling a discount system according to the invention 1 ,

A preferred but exemplary Application for the operation according to the invention a discount system is more digital related to sales Information or content, such as video and / or Audio sequences or files via the Internet. In order to maintain compliance with such a distribution To ensure copyright protection, become common so-called digital rights management systems are used. Here can a customer encrypted Generally obtain content free of charge on the Internet, being used for decryption and thus buy the right key to use the content got to. This purchase or acquisition of usage rights can as part of a subscription or in pieces.

The following description is based now on the assumption that the operator of such a digital Rights Management Systems also implemented a discount system, such that the customer receives bonus points with every purchase or at respective transmission of a suitable key Transfer bonus points with become. If the customer has collected a suitable amount of bonus points, receives he receives a reward song and / or a reward video from the operator as free Addition.

Secret-Sharing-Schwellwertverfahren eingesetzt wird. 1 schematically shows a flowchart for operating a discount system according to the invention, an example being a preferred one

Secret sharing threshold method is used.

Based on the above assumption, an operator device arranged on the side of the operator of the discount system and a user device arranged on the side of at least one user and necessary for using the discount system are provided for this in a preferred embodiment. which can be connected to one another via a communication network for the exchange of data and / or information.

In the simplest case, as with 1 shown, the operator sets a secret key, which is assigned to a goods Z intended as a discount. If the goods Z are encrypted goods, as described above, in particular digital, encrypted content that can be obtained free of charge via the Internet, it is preferably provided that the key is appropriately determined by the operator device for decryption and thus for the use of the content Z.

In the present example Assuming for simplicity, this bowl consists of the digits (0, -4).

Furthermore, a customer should receive the discount, So only get the goods Z free of charge if he is under four preferred content selects three and buys or uses accordingly.

As a result, the key (0, -4) will open n = 4 partial keys divided and assigned according to the four preferred content. This subkey will be used when purchasing this content or for decryption of the content necessary key to the user device, in the present example to a so-called Transfer player. The transfer the partial key is preferably encrypted and / or is only the User facility accessible as such, to avoid the risk of manipulation or the exchange of partial keys to prevent different users. In particular, the user device comprises in this case an appropriately adapted decoding mechanism for decryption the encrypted subkey.

After buying three of the preferred The user facility should also have four contents accordingly adapted reconstruction means to be able to receive with k = 3 Subkeys key reconstruct in order to decrypt the discount and free to use.

Secret-Sharing-Schema eingesetzt.To generate the partial key using the operator device, the assignment function is based on 1 , on

Secret sharing scheme used.

If, for example, a polynomial is selected to form such an assignment function by means of the operator device, a second-degree polynomial, ie a parabola, is required for the threshold value k = 3. The digits (0, -4) of the secret key for the parabola point (0, -4), which in this case denotes the point of intersection with the y axis, are also expediently used, so that the coefficient a _{0 of} the polynomial also a ₀ = -4 is defined. The further coefficients a ₁ and a ₂ are chosen randomly, for example, and in the present example let a ₁ = 0 and a ₂ = 2.

The polynomial chosen as the assignment function is therefore P (x) = -4 + 2x 2 ,

As assumed above, the key is supposed to be on four subkeys be split up so that for the first subkey for example at x1 = 1 the value P (1) = -2, for the second subkey for example at x2 = 2 the value P (2) = 4, for which third subkey for example at x3 = 3 the value P (3) = 14 and for the fourth subkey for example at x4 = 4 the value P (4) = 28 is generated.

In this case, the partial keys TS _i again form points of the assignment parabola with TS ₁ = (1, -2), TS ₂ = (2, 4), TS ₃ = (3, 14) and TS ₄ = (4, 28) ,

The subkeys TS ₁ to TS ₄ are correspondingly assigned on the operator side to the four selected goods X ₁ , X ₂ , X ₃ and X ₄ , in the case under consideration a subkey of exactly one content X ₁ , X ₂ , X ₃ and X, respectively _{4 is} assigned.

Different goods are now selected by means of the user device, that is, in the present example, encrypted content is obtained via the Internet and associated keys are obtained from the operator. Each time when a product is selected from the group of goods X ₁ , X ₂ , X ₃ or X ₄ defined by the operator and connected with a subkey TS ₁ to TS ₄ , the user device receives and / or detects the corresponding subkey ,

After authorized use of three different goods X ₁ , X ₂ , X ₃ and X ₄ , the user device reconstructs the key used by the operator.

After the key has been reconstructed, it can in the example considered, directly to decrypt the encrypted Discount Contents Z can be used.

Is simplest in the invention execution only one type of assignment function between operator and user used, for example a polynomial as in the previous case, where the intersection with the y-axis is used as a secret key is preferably provided, the means for generating the partial key and the means of reconstruction, especially by pre-installed Hardware to adapt accordingly, so that always a polynomial to Generate selected and a polynomial for the reconstruction of the secret key is always calculated or otherwise generated. The user device generates thus in the simplest case, especially when different discounts when using different goods are provided as long as polynomials after the "Trial and Error "principle, until the right key for decryption is reconstructed.

Alternatively, the secret key can also be expediently applied to the individual coefficient based on the polynomial chosen to generate the partial keys instead of the intersection with the y-axis.

2 shows an example of a secret key Su, which is based on the coefficients of a polynomial and is divided into five partial keys TS _u1 , TS _u2 , TS _u3 , TS _u3 and TS _u5 based on five points of the polynomial.

Especially if, depending on the application increase of flexibility different mapping functions are to be used, it is preferably provided that the user device additionally selected verification data transferred to, on the basis of which the user device carries out a reconstruction process controls. Such data include, for example, information about goods, to which matching subkeys are assigned, via reconstructed Key, those subkeys are assigned and / or via the type of mapping function to be generated.

Depending on the version of the to be operated according to the invention Discount system, is therefore the user device and / or the operator device in advance in accordance with the assignment rule or function to be used configured. Complementary or alternatively, however, provision is preferably made, in particular for one appropriately adapted microprocessor and / or one accordingly implemented software, this is the one requested by the operator Adapt the assignment rule accordingly, for example by Installation of new software, in particular remote-controlled in the user device.

Depending on the version or application the user device in practical further training also Memory in which received or detected partial key at least until the secret key is reconstructed. Also keys already reconstructed can depending on the field of application can be stored accordingly.

Depending on the version or Use case provided that the user device is user-specific Means include, such as one with a communication network connectable PC and / or a specific customer card with one in it embedded chip and corresponding hardware and / or software, for recording and storing transmitted data subkey and means for identifying the discount. Such a means of identification is about it also preferred centrally for one Large number of users, for example within a department store or using an internet platform provided by the operator arranged. After reading out the saved partial keys the user-individual means for recording and storing transmitted data subkey the discount is thus identified and the user or customer can redeem his reward directly from the operator.

In the example case considered above, are the partial keys for transmission to the user device preferably in a header of the actual one Contents comprehensive data and / or information set of a respective Contents embedded, which can be signed accordingly by the operator and conveniently cannot be manipulated.

Below, in particular with reference to 2 , some further preferred implementation examples regarding the implementation of discount-based rules according to the invention are described.

Again, let's assume that a customer collect a certain number of subkeys defined on the operator side and goods added must before the user device the common to these sub-keys secret. key to decrypt or identify the intended discount.

If the secret master key is, for example, a straight line S _y , in which case the assignment function itself corresponds to the secret master key, the number of partial keys into which the operator wishes to divide the secret key corresponds to points on the straight line S _y that correspond to a number of selected goods Y can be assigned. The partial keys of the straight line S _y correspond, for example, to the points TS _y1 , TS _y2 and TS _y3 . If a point TS _y1 , TS _y2 or TS _{y3 is} known, it is not yet possible to conclude the key S _y because, based on the underlying geometry, a very large number or even an infinite number of straight lines through a point can be compared. However, if two partial keys from the same group of partial keys are detected, that is to say the two points TS _y1 and TS _y2 or TS _y2 and TS _y3 or TS _y1 and TS _{y3 are detected} by the user device, the associated key, that is to say the straight line S _{y, can be} reconstructed because a straight line goes through two points.

A sub- _key TS _y1 , TS _y2 and / or TS _{y3 is thus} assigned to each product of a product type or a product group Y selected on the operator _side . If the customer buys these goods, he / she gets the attached partial key transferred to his / her user facility. If the operator has received the necessary minimum number of different such subkeys specified by the operator by purchasing corresponding goods, the user device reconstructs or calculates the secret master key from them.

However, the invention also enables the partial keys to be distributed over a group of goods and / or services, such as content, for example, so that several partial keys are assigned to each product. This means, for example, that particularly expensive goods have more partial keys than cheaper goods are conceivable. In this case, the customer can accelerate the collection of the required minimum number of partial keys by purchasing several more expensive goods.

Another preferred embodiment according to the invention provides, for example, that not every product is unique subkey is assigned, but rather a partial key of a plurality of goods and / or services. The assignment here can also be determined according to Rules weighted or random respectively. In the case of a random assignment in particular, a subkey is, for example also directly with every purchase of a product by random assignment for transmission selectable to the customer or his institution. This application sees This means that the customer receives a partial key that he is already based on on an earlier one Got a purchase. This in turn leads to the customer being more than needed Must purchase minimum number of goods until it actually reaches the one specified by the operator Gets minimum number of different partial keys for the reconstruction of the key. Such an embodiment of the invention preferably implement themselves within a competition, for example.

Another preferred embodiment comprises the implementation of hierarchical discount and / or addition rules.

On the operator side, for example, a combination of a k ₁ threshold value assignment function, for example S _z 2 , and a k ₂ threshold assignment function, for example S _y der 2 , a k ₃ threshold assignment function, for example S _v der 2 , educated. Here k ₃ comprises the threshold value 2, so that the subkeys TS _v1 and TS _{v2 of} the secret key S _{v are} the secret keys of the k ₁ threshold value assignment function and the k ₂ threshold value assignment function, that is to say S _z and S _y , respectively.

By appropriately detecting and storing or collecting two (with k ₁ = 2) the partial keys TS _z1 , TS _z2 and TS _{z3 of} the k ₁ threshold _value assignment function, the key S _{2 can be} reconstructed and correspondingly with the k ₂ threshold value assignment function , The keys S _z and S _y are then used, for example, taking into account corresponding verification data or because the keys were not recognized as suitable by the user device, again as subkeys TS _v1 and TS _v2 for generating the k ₃ threshold value assignment function, so that finally the key S _{v can be} reconstructed, which can ultimately be used to identify and / or decrypt the discount. In addition, however, the keys S _z and S _y can, for example, lead to a possibly smaller bonus on their own.

It should be pointed out that the preferred embodiment described above does not have to be limited to two product types or groups Z and Y, but rather can be expanded to any number of types or groups. The k ₃ threshold value assignment function must therefore be adapted accordingly on the operator side, it also being possible to determine that partial keys of each type do not have to be collected.

In general, therefore, for the one described above embodiment note that there are t different product groups, and by means of the device assigned to the customer from u, with u <t, product groups a defined number k of partial keys must be detected, to finally get the hierarchically highest secret master key to reconstruct. The respective keys of the u-threshold assignment function are therefore part of a key to define a t-threshold assignment function.

As a variation, replace according to another preferred embodiment y 'subkeys that Were assigned to group Y ' are, x 'subkeys that Were assigned to group X ' are.

Another preferred embodiment is accordingly trained to use keys with which subkeys can be generated that mutually when reconstructing the required key efface or partial key can be generated that prevent them when used for reconstruction.

A further preferred embodiment provides that the partial keys can not only be used on the customer side to achieve a single secret master key, but in several assignment functions for the respective reconstruction of the corresponding secret key. For example, according to 2 the subkeys TS _x1 , TS _x2 , TS _x3 and TS _x4 , of group X, the subkeys TS _y1 , TS _y2 and TS _y3 of group Y and the subkeys TS _z1 , TS _z2 and TS _z3 of group Z each have the key S _x , S _y or S _z assigned. With a fixed minimum number k _x of the partial keys assigned to the key S _x and a minimum number k _y of the partial keys assigned to the key S _{y there} is a first shared secret key S _w and with a number k _y of the partial keys assigned to the key S _y and a number k _z of the partial keys assigned to the key S _z , a second common secret key S _{v can be} reconstructed, in this case the intersection points of the straight lines S _x and S _y or S _y and S _z .

According to 1 , which represents such an implementation by the implementation according to the invention, several keys are selected as partial keys of a further shared secret key. In other words, they are in accordance 2 points TS _x1 , TS _x2 , TS _x3 and TS _{x4 shown are} the partial keys assigned to a group X and the straight line S _x the secret key assigned to this group. The straight line S _{x is also} assigned to the group W as a partial _key TS _w1 . Accordingly, the points TS _y1 , TS _y2 , and TS _y3 were the group Pe Y assigned subkey of the correspondingly divided key S _y . The straight line forming the key S _y is also the second partial key TS _{w2 of} the group W, so that the key S _w selected for this group W is the intersection of the straight lines S _x or TS _w1 and S _y or TS _w2 .

In an extension, the partial keys, which can be used for several keys, can be set to different requirements for the different keys. It is conceivable, for example, that one needs k _x1 partial keys TS _x and k _y partial keys TS _y for a first key, but k _x2 partial keys TS _x and k _z partial keys TS _z for a second key. Furthermore, these individual keys themselves can again be part keys of a further key via an assignment function, which key can therefore preferably be reconstructed for decrypting and / or identifying a further discount.

In a further embodiment, partial keys are also provided, which can be directly assigned to several assignment functions. Again starting from 2 , are for example the partial keys TS _x1 , TS _x2 , TS _x3 and TS _x4 , of group X, the partial keys TS _z1 , TS _z2 and TS _z3 of group Z and the partial keys TS _u1 , TS _u2 , TS _u3 , TS _u4 and TS _{u5 of} the group U each assigned the key S _x , S _z and S _u . However, the partial keys TS _u1 and TS _x3 or TS _u4 and TS _{z2 are} identical. Consequently, these subkeys can be assigned to both S _u and S _x or S _z .

A key is also using various Assignment functions can be divided into subkeys that belong to each other, so the key reconstructed in different ways, i.e. using different possible partial keys can be.

For example, there are several mapping functions each with a threshold value of k = 2, for a specific, and thus defined on a line based key. This straight line all intersect at one point, which in turn is the final one decryption and / or identification is intended to be reconstructed key. Another straight line through this point is preferred in this case not secret or encrypted but is public accessible. The customer has two subkeys collected a common assignment function is the associated key, so the straight line predictable. The final one for decryption and / or identification intended to be reconstructed key is finally through the intersection through the first reconstructed straight line and the public one Just defined. Thus, such a discount is necessary for an intended discount key equally reconstructed. It is therefore basically irrelevant whether the subkey of the an assignment function or another can be used. Alternatively, however, it is preferably provided that the assignment of the individual subkey weighted, i.e. the use of a corresponding assignment function on different "values" for the individual subkey based.

It should be noted that the key or the assignment function used to split the key into assigned subkeys too can be done visually or acoustically. In a visual embodiment is the key, for example as a black and white pattern determined which is divided into subkeys in such a way that these exactly aligned one above the other stored the key again but for only represent a random noise at a time. This can be for both the eye as well especially for any kind of computer-based Analysis done. For example, every pixel of the key is in four pixels divided into two foils, the division being random and therefore the individual partial keys only noise can be removed. By superimposing two of the same Elements result in a group of pixels that is half transparent or but, if the elements are complementary, a holistically black one Pixel group is created.

Similarly, for example, as secret key used audible Sequences can be divided so that only with correct overlay belonging together Partial sequences the original Tone or chord progression is recognizable.

In the application described as preferred, in particular when using digital information, e.g. the use of audio and / or video files is provided in particular that the respective split sub-key of a department key such as games, child-friendly applications, or feature films, sports records or software updates etc. can be assigned. The information can but can also be provided in analog form.

As service groups are in particular Access rights, for example to online newspapers, databases, To name magazines, especially in these cases the Storage of content in the user device, such as at an online newspaper, often not to use the service necessary is.

It should also be noted that the key to be reconstructed depends on the area of application too diverse Kind can be usable. For example, this includes one simple additional information for unlocking, opening and / or reading a File, a software and / or hardware component necessary for use, or even a partial sequence of a file, without which a usage would not possible is.

The invention consequently also includes, in particular as an Internet-based application, for example the assignment of partial keys to individual advertising banners, so that the user until the groove zereinrichtung can actually reconstruct the key for reading a desired page, must select a predetermined number of advertising banners and / or pages.

As a customer or user facility are when using an intranet or the Internet as a communication network especially suitable for matched game consoles or PCs. It is noted that however other communication networks or networks suitable for data exchange, such as a Cellular, telephone, radio, television and / or a power supply network for the Invention can be used.

It should also be noted that the individual facilities, means or components of the user facility, for example to connect to the side of the Operator, for loading, storing, unlocking and / or decrypting Contents, for the administration of the partial keys and / or the reconstructed key and / or the operator device each from a common physical Unit and / or from separate but mutually associated facilities can be included. Depending on the field of application, the components also include and / or assigned task hardware and / or software.

Finally, the invention encompasses Embodiments, in which the individual procedures according to the invention essentially fully automatic and / or optional, i.e. essentially partially automated carried out by the facilities become.

Claims (39)

Method for operating a discount system, characterized in that at least one secret key (S) is uniquely assigned to a discount provided by the provider of the discount system, using an assignment function a group of partial keys (TS) assigned to the key (S) in a reconstruction of the Key (S) specified necessary number of subkeys (TS) is generated from the group of subkeys, the subkeys (TS) of such a group of subkeys (TS) are assigned to goods from a group of goods, and with authorized use of a product from the Group of goods, the at least one partial key (TS) assigned to this product is transmitted to a user device required to use the discount system. A method according to claim 1, characterized in that to generate the subkey (TS) a secret sharing process is used. A method according to claim 1 or 2, characterized in that that the partial keys (TS) assigned to the goods are transmitted in encrypted form become. Method according to one of the preceding claims, characterized characterized that using the discount system necessary setup of the user in response to use Subkeys (TS) assigned to goods from the group of goods be recorded based on the specified number of partial keys (TS) the for the group of subkeys common key (S) is reconstructed, and using the key (S) identifies a discount provided by the provider of the discount system becomes. Method according to one of the preceding claims, characterized characterized in that before the assigned partial key (TS) is generated the key reconstruction (S) necessary number of partial keys (TS) fixed and under The assignment function is provided in response to the specified number becomes. Method according to one of the preceding claims, characterized characterized that one commodity from the group of commodities several Partial key (TS) be assigned and / or a partial key (TS) from several goods is assigned to the group of goods. Method according to one of the preceding claims, characterized characterized in that the allocation of the subkeys (TS) evenly, weighted or fortuitously he follows. Method according to one of the preceding claims, characterized in that the discount provided by the provider of the discount system is assigned a secret key (S _x ) which is assigned to a further key (S _w ) as a partial key (TS _w1 ) or that a secret Key (S _v ) assigned subkey (TS _v1 ) is used as a further key (S _z ), which in turn subkey (TS _z1 , TS _z2 , TS _z3 ) are assigned. Method according to one of the preceding claims, characterized characterized that a key reconstruction preventing partial keys (TS) and / or partial key (TS) are generated, the at least one assigned to a further assignment function subkey Replace (TS). Method according to one of the preceding claims, characterized characterized that as a discount a commodity by the group of Goods can be selected becomes. Method according to one of the preceding An Sayings, characterized in that a product intended as a discount is encrypted, and the assigned key (S) is reconstructed by the user device required to use the discount system to decrypt the product. Method according to one of the preceding claims, characterized marked that the necessary to use the discount system Setup of the user transfer data for reconstruction verification become. Method according to one of the preceding claims, characterized characterized that as a key (S) an optical, acoustic, cryptographic and / or mathematical Information is used and / or such information comprehensive code is generated. Method according to one of the preceding claims, characterized characterized that the discount by using the discount system necessary setup of the user after reconstruction of the assigned key (S) immediately decrypted, is displayed and / or used. Method according to one of the preceding claims, characterized characterized in that on the part of the user device a partial key (TS) and / or key (S) deleted after its use becomes. Method according to one of the preceding claims, characterized characterized in that a reconstructed key (S) as a partial key (TS) within a further group of partial keys (TS) for reconstruction one for the further group of subkeys (TS) common key (S) is used. The method of any preceding claim, further characterized in that the transfer to the for use of the discount system necessary user facility using a communication network, in particular an intranet, the Internet, a cellular, telephone, radio and / or television network is used. The method of any preceding claim, further characterized in that the provision of audio and / or video sequences, in particular also provided in digital form becomes. The method of any preceding claim, further characterized in that the goods are provided on a platform be, and the user device for using at least one of the Goods accessed the platform. Device for implementing a discount system, in particular to carry out of a method according to any of the preceding claims a facility associated with the provider of the discount system for Distribute a key (S) on a number of goods, in particular by using a secret sharing process, and / or a device for reconstruction assigned to the user of the discount system one, in particular by a secret sharing procedure, to a number of Distributed key goods (S). Device according to claim 20, characterized in that the facility assigned to the operator includes: medium for clearly assigning at least one key to a discount, medium to generate a key (S) assigned group of subkeys (TS) using an assignment function, Means for assigning the partial keys (TS) such a group of partial keys (TS) goods from a Group of goods, and Means for transferring a product assigned subkey (TS) to a facility required to use the discount system of the user in response to a legitimate use of this product. Device according to claim 20 or 21, characterized in that that the device assigned to the operator for encrypting the subkey (TS) is trained. Device according to one of the preceding claims 20 to 22, characterized in that the device assigned to the operator Means to choose an assignment function depending a defined or definable necessary number of partial keys (TS) for the reconstruction of the key (S) includes. Device according to one of the preceding claims 20 to 23, characterized in that the means for assigning the partial keys (TS) to assign multiple subkeys (TS) of a product and / or for assigning a partial key (TS) to several Goods from the group of goods is trained. Device according to one of the preceding claims 20 to 24, characterized in that the assignment of the partial keys (TS) selectable is, in particular weighted or done at random. Device according to one of the preceding claims 20 to 25, characterized by means for converting a partial key (TS) into a key (S), which in turn partial keys (TS) can be assigned and / or by means for converting a key (S) into a partial key (TS), the egg nem further key (S) can be assigned. Device according to one of the preceding claims 20 to 26, characterized in that the device assigned to the operator to assign multiple keys (S) is trained for a discount. Device according to one of the preceding claims 20 to 27, characterized by means for encrypting the discount, the assigned keys (S) to decrypt the discount can be used. Device according to one of the preceding claims 20 to 28, characterized in that the provider and / or the user assigned device for processing keys (S) and / or for processing of partial keys (TS) is designed, the optical, acoustic and / or mathematical Information includes. Device according to one of the preceding claims 20 to 29, characterized in that the device assigned to the user Means for reconstructing one associated with the provider Distributed key setup (S) based on a predetermined number of partial keys (TS) includes. Device according to one of the preceding claims 20 to 30, characterized in that the device assigned to the user includes: Means for capturing partial keys (TS) associated with goods, medium for calculating and / or verifying one for a group of partial keys (TS) common assignment function, Device according to one of the preceding claims 20 to 31, characterized in that the device assigned to the user Means for identifying and / or decrypting a discount based on the reconstructed key (S) includes. Device according to one of the preceding claims 20 to 32, characterized in that the device assigned to the user Means for storing captured partial keys (TS) and / or reconstructed ones key (S) includes. Device according to one of the preceding claims 20 to 33, characterized in that the device assigned to the user means for recognizing a key (S _x ) as a partial key (TS _w1 ) and for processing the key (S _x ) as a partial key (TS _w1 ) within a further group of partial keys (TS _w1 , TS _w2 ) for forming a key (S _w ) common to the further group of partial keys (TS _w1 , TS _w2 ). Device according to one of the preceding claims 20 to 34, in which the facilities by means of a communication network are connectable. Device according to one of the preceding claims 20 to 35, in which the user facility required to use the discount system is user-specific Means and / or a large number of users accessible together Means includes. Device according to one of the preceding claims 20 to 36, characterized in that the device assigned to the operator and / or the device assigned to the user has a microprocessor and / or for implementation of the method according to one of the preceding claims 1 to 19 trained accordingly Software include. Implementation software product for performing the Method according to one of the claims 1 to 19, in particular adapted for implementation in a device according to one of the claims 20 to 37. Use of a device according to one of claims 20 to 37 for implementation of a method according to one of claims 1 to 19.