English
86
10. Possible usage of the DIGITTRADE HS256 S3
1) Secure and cost-efficient data transport
The HS256 S3 can be used to transport confidential data. For the dispatcher and
recipient of the data, have a smart card with identical cryptographic keys. The dispatcher
only sends the HS256 S3. As the cryptographic keys do not physically exist (it is on the
smart cards), it cannot be read out during the transport. Additionally the HS256 S3 with
confidential data can be sent cost-efficiently and insured by a postal service or courier.
The dispatcher and recipient must check that the HS256 S3 has not been tampered
during the transport. For this purpose it is recommended to use security packaging like
described in chapter 1.8. This is also effective for all other transport possibilities of the
HS256 S3.
For additional security, the use of multiple smart cards with different
cryptographic keys, (deposited at the dispatcher and recipient) which can be used to
decrypt or encrypt the data in a chosen sequence.
2) Data storage device & authentication separation
The access to the data can be regulated with help of three persons. Person X has the
HS256 S3, Person Y has the smart card and person Z knows the smart card PIN. The three
people only meet for the data transfer at the recipient and separate again afterwards.
Persons X, Y and Z cannot gain access to the data on their own.