Attribute Key-Based Session Encryption for Secure Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data transmission systems lack effective security mechanisms to prevent information leakage during network communication, necessitating enhanced protection measures.
Innovation Solution
A transmission system comprising a first security unit, a second security unit, and a server, where the server assigns attribute keys to each unit based on application and user attributes, enabling secure encryption and decryption of session keys for secure data exchange between application ends and user ends.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional data transmission systems are used, then communication simplicity is maintained, but security protection against information leakage is insufficient
Solution Approach 1:
The system divides the security functionality into separate security units (first security unit at application end, second security unit at user end) that are coupled to the server. Each security unit independently handles encryption/decryption operations, segmenting the security protection function from the general data transmission function and enabling targeted security enhancement without complicating the entire system.
Solution Approach 2:
The server acts as an intermediary that coordinates between the first security unit and second security unit. It assigns attribute keys to both security units and manages the key distribution process, serving as a mediator that enables secure communication without requiring direct complex interactions between the application end and user end security systems.
2Reliability
If attribute-based encryption is implemented, then access control security is enhanced, but key management complexity increases
Solution Approach 1:
The attribute key system serves multiple functions: it provides encryption keys for data protection, acts as access control credentials for authorization decisions, and enables fine-grained permission management. This multi-functional attribute key system enhances access control security while avoiding the need for separate key management systems for each function.
Solution Approach 2:
The system changes the parameter of key management by using attribute-based keys instead of traditional fixed keys. Attribute keys can be dynamically assigned, modified, and revoked based on user attributes and application requirements, providing flexible access control security without the rigidity of traditional key management systems.
3Reliability
If session key encryption is used, then data transmission security is improved, but computational overhead increases
Solution Approach 1:
The session key is encrypted with the attribute key in advance before data transmission begins. The first security unit encrypts the session key using the pre-assigned attribute key, and this encrypted session key is transmitted to the second security unit. This preliminary encryption action ensures data transmission security while allowing the actual data to be transmitted using the already-established encrypted session key, reducing computational overhead during active transmission.
Data Source
AI summary
A transmission system includes a first security unit coupling to application ends, a second security unit coupling to a user end, and a server. The server sends a first attribute key to the first security unit based on attributes of the application ends and sends a second attribute key to the second security unit based on attributes of the user end. To enable one application end, the first security unit encrypts a session key with the first attribute key, opens a socket, and sends the encrypted session key to the server. When the second security unit receives a request for the application end, the server sends the encrypted session key to the second security unit. The second security unit decrypts the encrypted session key with the second attribute key and connects to the socket. The second security unit interchanges information with the first security unit via the session key.