Client-Side Character Encryption for Password Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for concealing sensitive information, such as passwords, are inadequate when an onlooker gains access to a device or malicious servers intercept data before encryption, as they can reveal or intercept the information, compromising security.
Innovation Solution
Implementing an encryption orchestration process that encrypts each character of the input string using a unique key/cipher combination updated for each session, with the client device encrypting and displaying modified characters and the host server decrypting them, ensuring only encrypted information is transmitted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional masking or concealment methods are used for input fields, then the interface simplicity is maintained, but security against onlookers and malware is compromised
Solution Approach 1:
The patent segments the encryption process into multiple components: client-side encryption module, server-side decryption module, and unique key generation for each session. This segmentation allows the system to maintain simple user interface while implementing robust multi-layer security architecture that prevents both onlooker access and malware interception
Solution Approach 2:
The patent applies preliminary action by encrypting the password on the client device before transmission to the server. The encryption occurs in advance during the input phase, so that even if malware intercepts the data or onlookers access the screen, the sensitive information remains encrypted and unusable throughout the entire transmission and processing chain
2Reliability
If encryption is implemented on the client device before transmission, then security against malware interception is improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary encryption layer between the client device and server. The encryption module acts as a mediator that transforms plaintext passwords into encrypted ciphertext using unique session keys, adding security without requiring fundamental changes to the existing client-server architecture or user interaction patterns
Solution Approach 2:
The patent changes the parameter of encryption by implementing dynamic encryption where each session uses a unique key/cipher combination. This parameter change approach allows the system to maintain compatibility with existing servers while significantly enhancing security, as the variability of encryption parameters prevents pattern recognition and brute force attacks
3Reliability
If unique key/cipher combination is used for each session, then security against replay attacks is improved, but processing time increases
Solution Approach 1:
The patent implements periodic action by generating a new unique key/cipher combination for each session or login attempt. This periodic regeneration of encryption parameters ensures that each encryption operation is independent and secure against replay attacks, while the automated key management system minimizes the perceptible time overhead for users
Data Source
AI summary
Methods, systems, and computer program products for implementing an encryption orchestration of sensitive information process. An application window is provided on an interface on the display during a first session. A first encryption key and a first session identification (ID) associated with the first session is received. Input of a first character string is received at an input field that includes one or more characters, where each character is modified based on an encryption algorithm utilizing the first encryption key associated with the first session ID. The modified characters are provided as a modified input string to the host server, where the host server is configured to decrypt the modified input string based on a decryption algorithm. A second display page is provided on the display in response to receiving access from the host server based on an evaluation of a decryption of the modified input string.