Blockchain DID Messenger Key Exchange for Private Message Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing messenger services rely on centralized servers for message transmission and storage, which can compromise user privacy and data ownership, as intermediaries can access and commercialize private message data, and users lack control over their own data.
Innovation Solution
Implementing a decentralized messenger system using Decentralized Identifiers (DIDs) on a public blockchain network, enabling end-to-end encryption between clients without an intermediary, where users can create topics, invite others, and control encryption keys, ensuring only participants can access and decrypt messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized server is used for message transmission and storage, then message delivery reliability is improved, but user privacy and data ownership are compromised
Solution Approach 1:
The patent extracts the intermediary function from the centralized server by implementing end-to-end encryption where the server only transmits encrypted data without the ability to decrypt it. The decryption keys are held exclusively by the communicating clients, removing the server's access capability and thus protecting user privacy while maintaining reliable message delivery through the server infrastructure.
Solution Approach 2:
The patent introduces an intermediary verification mechanism where the server acts as a mediator for key exchange and message routing without having access to the actual message content. The server verifies encryption and facilitates communication between clients while the cryptographic protocols ensure that no single intermediary can compromise user privacy.
2Object-affected harmful factors
If end-to-end encryption is implemented without a central server, then user privacy is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal cryptographic protocol framework that handles multiple functions including key generation, key exchange, encryption, decryption, and message authentication within a unified system architecture. This multi-functional approach reduces overall system complexity by eliminating the need for separate specialized components for each cryptographic operation.
Solution Approach 2:
The system enables clients to autonomously generate their own cryptographic key pairs and manage their own encryption/decryption operations without requiring complex centralized key management infrastructure. Each client independently performs cryptographic operations on their device, reducing the complexity burden on the server and distributing the computational workload.
3Adaptability or versatility
If decentralized identifier system is used, then data ownership control is improved, but communication overhead increases
Solution Approach 1:
The patent implements preliminary action by pre-generating and storing cryptographic public keys and decentralized identifiers (DIDs) in a distributed ledger before communication occurs. This allows for efficient peer-to-peer connection establishment and authentication without requiring extensive real-time communication overhead for key exchange and identity verification during actual message transmission.
Data Source
AI summary
The present disclosure related to a client device including a communication interface configured to communicate with an agency server and a counterpart device, a memory, and a processor. The processor may transmit a topic creation request to the agency server, when a topic creation notification is received from the agency server, generate a first subscription DID corresponding to the topic, a pair of first subscription private key and first subscription public key corresponding to the first subscription DID, transmit the first subscription DID to the counterpart device, receive a second subscription DID generated by the counterpart device from the agency server, generate a first encryption key based on the first subscription private key and the second subscription DID, and transmit message data encrypted with the first encryption key to the agency server.


