Blockchain-Based Secure Client-Server Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Constrained devices, such as IoT devices, face significant computational complexity and processing delays when establishing secure connections using existing TLS or DTLS protocols due to the large number of handshake messages required, which is overwhelming for resource-constrained environments.
Innovation Solution
A secure communication system that utilizes a blockchain to reduce the number of handshake messages by generating cryptographic keys for secure connections, with each device having read/write access to a local copy of the blockchain for storing cryptographic information records, allowing for a simplified and efficient setup of secure connections using a minimal number of messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TLS or DTLS protocols are used to establish secure connections, then security is improved, but computational complexity and processing delays increase significantly
Solution Approach 1:
The patent applies preliminary action by pre-storing cryptographic information (public keys, certificates, or pre-shared keys) in the blockchain before the secure connection is needed. When a connection is required, the client and server can directly retrieve and use this pre-prepared cryptographic data, eliminating the need for complex real-time key generation and certificate verification processes that normally occur during TLS/DTLS handshaking.
Solution Approach 2:
The patent extracts the cryptographic information from the traditional TLS/DTLS handshake process and stores it separately in the blockchain. This separation allows the handshake to proceed with minimal computational overhead, as the cryptographic materials are readily available in the blockchain rather than needing to be generated or transmitted during the connection establishment.
2Reliability
If TLS or DTLS protocols are used to establish secure connections, then security is improved, but processing delays increase due to multiple handshake messages
Solution Approach 1:
The cryptographic information is prepared and stored in the blockchain in advance, allowing the actual connection establishment to skip multiple handshake rounds. The client and server can quickly exchange minimal messages to reference the pre-stored cryptographic data, dramatically reducing the time required for secure connection setup compared to traditional TLS/DTLS protocols.
3Reliability
If traditional TLS/DTLS handshaking is used, then secure connections are established, but the number of handshake messages required is overwhelming for constrained devices
Solution Approach 1:
The patent extracts cryptographic information storage from the complex handshake protocol and places it in the blockchain. This allows constrained devices to operate with simplified connection establishment, as they only need to reference pre-stored cryptographic data in the blockchain rather than managing complex key exchange protocols and multiple message exchanges.
Solution Approach 2:
The patent uses the blockchain as a shared copy of cryptographic information that both client and server can access. Instead of each device needing to generate and manage its own cryptographic materials through complex handshaking, they both reference the same authoritative copy stored in the blockchain, simplifying the operation for constrained devices.
Data Source
AI summary
In one embodiment, a client device includes an interface, a memory to store at least one part of a blockchain, and a processor to generate a client message indicating use of blockchain mode to establish a secure connection between the client device and a server, send the client message to the server on the interface, receive, from the server on the interface, a server message indicating use of the blockchain mode, and securely communicate with the server, on the interface, using at least one cryptographic key generated from information including cryptographic key generation information stored in the blockchain. Related apparatus and methods are also described.