Communication Device Encryption Across Non-Overlapping Network Paths
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encrypted communication technologies face vulnerabilities and key distribution challenges when sharing data between distant communication devices, particularly in common key type encrypted communication, and public key type encrypted communication technologies have known vulnerabilities.
Innovation Solution
A communication system where each device performs encryption and decryption operations satisfying the commutative and associative laws, with non-overlapping network paths for data transmission, ensuring secure data sharing without pre-shared keys, using barrel shift, four arithmetic operations, or exclusive OR operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If common key type encrypted communication is used between two communication devices located far apart, then encrypted communication can be executed with the same algorithm and key, but it is extremely difficult to share a common key securely between the two devices without already having established encrypted communication
Solution Approach 1:
The patent introduces a third communication device as an intermediary to facilitate secure key exchange between two distant devices. The intermediary device receives encrypted data from the first device, performs decryption and re-encryption operations, and forwards the result to the second device. This mediator approach allows key distribution without requiring the two distant devices to directly share keys, thus resolving the key distribution problem while maintaining security.
2Adaptability or versatility
If public key type encrypted communication technology is used, then key distribution problem is supposedly solved, but vulnerabilities have been discovered and it does not completely solve the key distribution problem
Solution Approach 1:
The patent employs a copying mechanism where the intermediary device creates a copy of the encrypted data, performs decryption operations on the copy, and then re-encrypts it. This copying approach allows the system to manipulate encrypted data without exposing the original plaintext, maintaining security while enabling key distribution functions that public key systems cannot reliably provide.
3Ease of operation
If the same encryption algorithm and key are used for communication between two devices, then encrypted communication can be established, but the devices must share the same key in advance which creates the key distribution problem
Solution Approach 1:
The patent implements preliminary action by having the intermediary device pre-establish encrypted communication channels with both the first and second devices before the actual data exchange occurs. This preliminary setup allows the intermediary to perform necessary decryption and re-encryption operations without requiring real-time key sharing between the two distant devices, thus saving time and simplifying the operation.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
To securely and easily share shared data between two communication devices which execute encrypted communication, a first communication device encrypts the shared data into first encrypted data (Step S503), and transmits the first encrypted data to a second communication device by using a first path on a network (Step S504). The second communication device receives the first encrypted data (Step S601), further encrypts the first encrypted data into second/first encrypted data (Step S602), and transmits the second/first encrypted data to the first communication device by using a second path (Step S603). The first communication device receives the second/first encrypted data (Step S505), executes an inverse transformation on the second/first encrypted data to obtain second encrypted data (Step S506), and transmits the second encrypted data to the second communication device by using a third path (Step S507). The second communication device receives the second encrypted data (Step S604), and executes an inverse transformation on the second encrypted data to turn the second encrypted data back into the shared data (Step S605). The first path and the second path do not overlap.