Cryptographic Key Exchange for Secure Data Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Service providers face vulnerabilities in user data security, particularly due to middle-person attacks, as existing authentication methods using emails are easily accessible and can be used to hack multiple accounts, necessitating a secure means for updating user data.
Innovation Solution
A system utilizing public key cryptography and symmetric algorithms to securely replace data values, generating public and private keys through elliptic curves, and creating a shared encryption key to encrypt cryptographic seed values, ensuring secure data updates without relying on third-party services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If email-based authentication is used for data updates, then ease of operation is improved, but security is worsened due to vulnerability to middle-person attacks and account hacking
Solution Approach 1:
The patent introduces an intermediary authentication mechanism using cryptographic key pairs and shared secrets that mediate between the user and the service provider. Instead of directly using email passwords, the system uses cryptographic intermediaries (public keys, private keys, and shared secrets) to authenticate users securely, preventing middle-person attacks while maintaining ease of operation.
Solution Approach 2:
The patent replaces the mechanical/email-based authentication system with a cryptographic system. Instead of relying on email communication and password verification (mechanical system), the system uses mathematical cryptographic operations (public key cryptography, elliptic curve calculations, and shared secret generation) to provide secure authentication that is resistant to hacking and middle-person attacks.
2Reliability
If cryptographic key pairs and shared secrets are used for authentication, then data security is improved, but device complexity is worsened
Solution Approach 1:
The patent applies preliminary action by pre-generating cryptographic key pairs and shared secrets during account setup or before data updates. The system prepares all necessary cryptographic materials in advance, so that during actual data updates, the authentication process is streamlined and does not require complex real-time cryptographic computations, thereby reducing operational complexity while maintaining high security.
Data Source
AI summary
A method of securely replacing a first data value with a second data value and related systems are disclosed. The method includes generating a first public key and a first private key, generating a cryptographic seed value, and passing the cryptographic seed value through an elliptic curve to generate a second public key and a second private key. The method further includes combining the first public key with the second private key using public key cryptography to create a shared encryption key and passing the shared encryption key through a symmetric algorithm to encrypt the cryptographic seed value.