Secure Data Communication via Asymmetric Session Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data communication methods between computers, especially in cloud-based systems, lack effective encryption solutions that prevent unauthorized access to sensitive information, as they often rely on complex third-party key storage servers and do not ensure secure decryption processes.
Innovation Solution
A system and method where computers generate and use session keys for encryption and decryption, with asymmetric key pairs, allowing secure communication by encrypting session keys with public keys and decrypting them using private keys, eliminating the need for a third-party key storage server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If third-party key storage servers are used to manage encryption keys, then data communication security is improved, but system complexity increases and requires key deposition from both source and destination computers
Solution Approach 1:
The patent extracts the key storage function from the communication system entirely. Instead of using third-party key storage servers, each computer generates and retains its own private keys locally. The destination computer's public key is used to encrypt session keys, eliminating the need for key deposition at third-party servers and reducing system complexity while maintaining security.
Solution Approach 2:
Each computer in the system performs its own key management functions. The source computer generates session keys and encrypts them using the destination computer's public key. The destination computer uses its private key to decrypt the session keys. This self-service approach eliminates dependency on third-party key storage infrastructure.
2Ease of operation
If traditional encryption methods are used where encrypted data is decrypted at the point of reading, then data can be accessed, but unauthorized receivers may still decrypt the data
Solution Approach 1:
The patent applies asymmetric cryptography where the source computer encrypts data with the destination computer's public key, and only the destination computer can decrypt it with its private key. This asymmetric key pair mechanism ensures that even if encrypted data is intercepted, unauthorized receivers cannot decrypt it, while the authorized destination computer can access the data seamlessly.
3Adaptability or versatility
If cloud-based platforms are used for data storage and sharing, then data accessibility and collaboration are improved, but security risks from man-in-the-middle attacks increase
Solution Approach 1:
The patent implements preliminary encryption of data and session keys before transmission through cloud-based platforms. The source computer encrypts the session key with the destination computer's public key before sending it through the cloud. This preliminary security measure ensures that even if cloud platforms or network intermediaries attempt to intercept or access the data, they cannot decrypt it without the destination computer's private key.
Data Source
AI summary
An aspect of the present disclosure generally relates to a computer system (100) and method (200) for securing data communication between a first computer (110) and a second computer (120). The method (200) comprises: cooperatively executing (202), by the first computer (110) and the second computer (120), a first data communication instruction for communicating first data from the first computer (110) to the second computer (120); generating (204) a first session key by the first computer (110); encrypting (206), by the first computer (110) the first data using the first session key; encrypting (208), by the first computer (110) the first session key using a first public key, the first public key paired with a first private key which are generated for the second computer (120); sending (210) the encrypted first data and first session key from the first computer (110) to the second computer (120); decrypting (212), by the second computer (120), the encrypted first session key using the first private key; decrypting (214), by the second computer (120) the encrypted first data using the decrypted first session key; and processing (216), by the second computer (120), the decrypted first data based on the first data communication instruction.