End-to-End Content Delivery Without Service-Side Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing content delivery services expose encrypted content to third-party networks due to cryptographic protocols terminating at these services, making the content vulnerable to attacks and unauthorized access.
Innovation Solution
Establishing a key pair between the source and recipient entities outside the content delivery service, generating an encrypted content package with a payload handler, and using a signature to ensure secure transmission without decryption by the service, maintaining encryption throughout the delivery process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic protocols (TLS, SSL) are used to transport content through the content delivery service network, then secure transport is achieved, but the content is exposed to the content delivery service network at protocol termination points
Solution Approach 1:
The cryptographic connection is segmented into two separate connections: one from the source to the content delivery service, and another from the content delivery service to the recipient. Each connection has its own termination point, and the content remains encrypted end-to-end without being exposed at the service boundary.
Solution Approach 2:
The content delivery service acts as an intermediary that forwards encrypted content without decrypting it. The service relays the encrypted payload between source and recipient while maintaining the cryptographic integrity of the end-to-end connection, preventing content exposure at the service level.
2Ease of operation
If content is delivered via network-based connection through third party channel, then delivery service is provided, but content may be altered by malicious parties
Solution Approach 1:
A digital signature is applied to the content payload before it is transmitted through the content delivery service. This preliminary cryptographic binding of the content to its source ensures that any alteration of the content during transit through the third-party channel can be detected, maintaining content integrity while allowing delivery service operation.
Data Source
AI summary
Devices and techniques for secure transmission of content over third-party networks are provided. Keys are established for secure transport of content between a source and recipient via a third party. The source generates a content package that includes an encrypted payload, and a payload handler. In some instances, the content package may also include user interface code for obtaining a secret from the recipient. The content package may be signed (e.g., the message content hashed and the result of the hash added to the content package). The content package is transmitted over a connection to a content delivery service for delivery to recipient(s) via another connection. The content delivery service receives the package and forwards the package to recipient(s) without decrypting the payload. A recipient receives the package from the content delivery service, validates the package and decrypts the payload. The payload may be presented to a display application.