Communication Protection via Session Hash Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission protocols like FTP and HTTP lack integrity checking and file protection, especially when handling multiple simultaneous connections, which affects the reliability and security of data transfer.
Innovation Solution
A method that uses encrypted session IDs and hash values to verify data integrity across multiple connections by comparing independently calculated hash values at both the client and server, ensuring data accuracy and security during transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple asynchronous connections are used for data transfer, then data transfer speed is improved, but data integrity and security are worsened
Solution Approach 1:
The patent segments data transfer into multiple asynchronous connections while maintaining session-level coordination. Each connection handles specific data segments independently, enabling parallel transfer that improves speed while the session framework ensures overall data integrity through centralized hash verification.
Solution Approach 2:
The patent implements feedback mechanisms where hash values are calculated and verified at multiple stages (individual connections and overall session). This feedback loop detects transmission errors and ensures data integrity across multiple connections without sacrificing transfer speed.
2Reliability
If encryption is added to FTP or HTTP, then file protection is improved, but transfer performance is worsened
Solution Approach 1:
The patent performs preliminary hashing of data before transmission and sends hash values along with the encrypted data. This preliminary action enables the receiving end to quickly verify integrity without requiring complex decryption operations, thus protecting files while maintaining transfer performance.
Solution Approach 2:
The patent uses computationally inexpensive hash functions (MD5 or SHA-1) that provide sufficient security for integrity verification without the heavy computational overhead of strong encryption algorithms. These hash values are disposable artifacts used only for verification purposes.
3Reliability
If hash verification is performed for each connection, then data integrity is improved, but processing complexity is worsened
Solution Approach 1:
The patent segments the verification process into connection-level hash checks and session-level hash checks. This segmentation allows incremental verification at each connection while maintaining overall session integrity, improving reliability without overwhelming processing complexity through manageable, modular verification steps.
Data Source
AI summary
A method for transferring data between a first computer and a second computer is provided. The first computer sends a request to start a session, an encrypted session ID, and an encrypted hash value to the second computer. The second computer receives the request, decrypts the encrypted hash value, independently determines a hash value and compares the independently determined value to the decrypted value. If they match, the second computer starts a session with the first computer. Subsequently, the first computer sends a request to download or upload data, an encrypted ID, an identity of the file, and an encrypted hash value to the second computer in a second connection in the session. The second computer receives the request, decrypts the encrypted hash value, independently determines a hash value and compares the independently determined value to the decrypted value. If they match, the second computer processes the request.