Computational Tag Mobile Document Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Encryption systems are often difficult to use and not widely deployed due to the challenges of protecting and distributing cryptographic keys, especially in the context of remote malicious attacks on networked computer systems.
Innovation Solution
A method and system utilizing computational tags in near field communication with mobile electronic devices for secure encryption and decryption of documents, where the tags perform encryption and decryption operations and manage cryptographic keys, allowing for secure data access without retaining unencrypted keys on the device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption systems are deployed to protect data, then data security is improved, but system complexity and ease of operation deteriorate due to key management challenges
Solution Approach 1:
The patent extracts the cryptographic key management functionality from the mobile device and places it on a separate computational tag. The tag stores cryptographic keys and performs encryption/decryption operations independently, while the mobile device only handles plaintext documents. This separation removes the burden of key management from the user and device, improving ease of operation while maintaining strong security.
Solution Approach 2:
The computational tag acts as an intermediary between the mobile device and encrypted data. It receives plaintext from the mobile device, performs encryption using stored keys, and returns ciphertext. For decryption, it receives ciphertext, processes it with the appropriate keys, and returns plaintext. This intermediary role simplifies the mobile device's functionality while ensuring secure key management.
2Reliability
If cryptographic keys are distributed across networked systems, then encryption capability is improved, but vulnerability to remote malicious attacks increases
Solution Approach 1:
The system segments cryptographic key storage and processing from the mobile device into a separate computational tag. This segmentation ensures that even if the mobile device is compromised through remote attacks, the cryptographic keys remain protected on the independent tag, which has its own secure element and cannot be easily accessed or extracted.
Solution Approach 2:
The patent employs cryptographic keys with limited lifetimes and scope. Session keys are generated for specific encryption operations and discarded afterward. Long-term keys are stored securely in the tag's secure element and never leave the device. This approach limits the damage potential of any key compromise while maintaining strong encryption capability.
3Reliability
If encryption is implemented on mobile devices, then data privacy is improved, but user convenience deteriorates due to difficult operation
Solution Approach 1:
The computational tag performs self-service by automatically managing cryptographic keys and performing encryption/decryption operations without user intervention. When a user wants to encrypt a document, they simply initiate the operation on the mobile device, and the tag handles key selection, encryption, and secure storage automatically. The same applies to decryption - the user requests it, and the tag completes the process seamlessly.
Data Source
AI summary
A method of encrypting information using a computational tag may include, by a mobile electronic device, detecting a computational tag within a near field communication range of the mobile electronic device, identifying a document to be encrypted by the mobile electronic device, transmitting the document to the computational tag by the mobile electronic device, receiving, from the computational tag, an encrypted document, wherein the encrypted document comprises an encrypted version of the document that was to be encrypted, and storing the encrypted document in a memory of the mobile electronic device.