Cryptography Algorithm Hopping for Secure Channel Negotiation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure communication protocols, such as TLS, often involve plaintext communications that can reveal information about the secure channel, making it easier for attackers to exploit known weaknesses in cryptographic implementations, especially in complex network configurations where access to multiple parties is required.
Innovation Solution
The proposed solution involves a client and server negotiating a secure communications channel with a third party, which provides security parameters to establish a new secure channel, reducing the risk of plaintext information exposure by requiring attackers to access communications with both the client and server, as well as the third party, thereby increasing security. This is enhanced by using a cryptography algorithm hopping model to switch between cryptographic algorithms over time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If plaintext communications are used to establish a secure channel, then the communication protocol is simple and easy to implement, but information about the secure channel is exposed to attackers
Solution Approach 1:
The patent segments the secure channel establishment process into multiple phases: initial plaintext negotiation phase and subsequent encrypted communication phase. The security parameters are separated from the plaintext communication stream, allowing the channel to be established with minimal plaintext exposure while maintaining implementability.
Solution Approach 2:
The patent performs preliminary establishment of security parameters through plaintext communication before actual data transmission begins. Once the secure channel is established with exchanged security parameters, all subsequent communications occur in encrypted form, preventing information exposure during the main communication phase.
2Device complexity
If a single cryptographic algorithm is used for secure communication, then the implementation is simple, but the security is vulnerable to known weaknesses
Solution Approach 1:
The patent implements cryptography algorithm hopping by dynamically changing the cryptographic algorithm parameters over time. The system transitions between multiple cryptographic algorithms (e.g., from AES-256-GCM to ChaCha20-Poly1305) based on predefined hopping schedules or security events, making it difficult for attackers to exploit weaknesses in a single algorithm while maintaining manageable implementation complexity through structured algorithm selection.
Data Source
AI summary
A cryptography algorithm hopping model is used to enable computer systems communicating with one another to vary the cryptographic algorithms used for the communications. The cryptography algorithm hopping model specifies a plurality of cryptography algorithms and information sufficient to determine a sequence of the plurality of cryptography algorithms and to determine when to switch from a cryptography algorithm in the sequence to a next cryptography algorithm in the sequence.