Ambiguity Envelope Encryption for Dynamic Key Generation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing encryption schemes for wireless and wired transmissions rely heavily on the security of encryption keys, which can be compromised, especially with advancements in computer power and the ease of intercepting wireless transmissions, leading to vulnerabilities in securing private information.

Innovation Solution

The Ambiguity Envelope (AE) system generates random-variant-keys that are distinct and separate for each data packet, created on the fly using a bounded random number generator, ambiguity envelope function, and jitter function, eliminating the need for pre-existing encryption keys and reducing the risk of key compromise.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If standard encryption keys are used for wireless transmissions, then encryption security is provided, but the keys can be intercepted and broken by hackers using special antennas and increased computer power

Engineering Contradiction:
Improveencryption securityVSAvoidkey interception and breaking
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies dynamics by transitioning from static encryption keys to dynamic random-variant-keys that change for each data packet. The system generates a new key variant for every packet using a pseudo-random number generator seeded with a master key, making the encryption key dynamic and unpredictable. This resolves the contradiction by ensuring security through continuous key variation rather than relying on a fixed key that can be intercepted and broken.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent applies preliminary action by pre-distributing a master key through secure channels before wireless transmission begins. This master key is then used locally at each endpoint to generate the random-variant-keys for encrypting and decrypting packets. The preliminary secure distribution of the master key eliminates the need to transmit encryption keys over the wireless channel, preventing key interception while maintaining decryption capability.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If encryption keys are exchanged between transmission endpoints, then encryption can be performed, but the key exchange process creates security vulnerabilities during distribution

Engineering Contradiction:
Improveencryption capabilityVSAvoidkey management and safeguarding
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies taking out by extracting the key generation process from the key exchange process. Instead of exchanging encryption keys between endpoints, the system extracts only the master key distribution step (performed securely beforehand) and performs all subsequent key generation locally at each endpoint using the pseudo-random number generator. This eliminates the vulnerable key exchange process while maintaining encryption capability.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent applies self-service by enabling each endpoint to independently generate its own random-variant-keys locally using the pre-distributed master key and the pseudo-random number generator. Each device serves itself by creating the encryption keys it needs without requiring secure key exchange or key management infrastructure during operation. This eliminates key management complexity while ensuring encryption capability.

Inventive Principle:
Principle #25Self-service

3Ease of operation

If the same encryption key is used for multiple data packets, then key distribution is simplified, but the security is compromised if the key is intercepted

Engineering Contradiction:
Improvekey distributionVSAvoidtransmission security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent applies segmentation by dividing the single master key into multiple random-variant-keys, one for each data packet. The master key is segmented through the pseudo-random number generator to produce a unique key variant for every packet transmitted. This segmentation maintains ease of operation because only one master key needs to be distributed, while simultaneously improving reliability because each packet has its own unique encryption key that cannot be compromised by intercepting another packet's key.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP1908202B1Systems, method, integrated circuit chip and computer program product for ambiguity envelope encryption
Publication Date: 2019.12.18 SINGHAL TARA CHAND
  • EP1908202B1 patent drawingFigure 1
  • EP1908202B1 patent drawingFigure 2
  • EP1908202B1 patent drawingFigure 3A

AI summary

Ambiguity Envelope (AE) security uses prior art encryption algorithms and prior art encryption keys and provides systems and methods for random-variant-keys that are used in place of the prior art encryption keys. In AE an ambiguity envelope (12) is created over the transmission of data packets, so that no specific encryption key (20), as in prior art, is used but random-variant-keys (18) are used that are distinct and separate for each packet (22) and may also be distinct and separate for each incoming and outgoing packet. Bounded Random Number Generator Function (18) generates a random number (17) which is input to a Shuffling and Pairing sub- function (22), which outputs to an envelope creation sub-function (24) which outputs the ambiguity envelope to the envelope offset sub-function (26). The envelope offset sub-function outputs an offset (27) which is used by a jitter function (14) to generate the random-variant-keys.