Digital Security Bubble Encapsulation for Secure Cross-Platform Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing approaches to securing communications are cumbersome and susceptible to interception, eavesdropping, and man-in-the-middle attacks, making it difficult for users to communicate privately and securely across various devices and platforms.

Innovation Solution

A digital security bubble (DSB) technology that encapsulates messages with encryption information, hardware binding, and message security controls, allowing secure cross-platform communication by generating public/private keypairs, device identifiers, and unique app identifiers, ensuring only intended devices can decrypt messages, and using TLS for additional security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If digital certificates or keys are used to secure communications, then security is improved, but ease of operation deteriorates due to tedious management

Engineering Contradiction:
ImprovesecurityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system automatically generates cryptographic keypairs and manages digital certificates without requiring manual user intervention. The mobile device autonomously performs key generation, storage, and management operations, eliminating the tedious manual management of security credentials while maintaining strong security protection.

Inventive Principle:
Principle #25Self-service

2Reliability

If existing security approaches are used, then security is provided, but reliability deteriorates due to susceptibility to interception and attacks

Engineering Contradiction:
ImprovesecurityVSAvoidinterception susceptibility
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary key generation and establishes secure communication channels before actual data transmission begins. By pre-configuring cryptographic credentials and establishing secure contexts in advance, the system prevents interception and man-in-the-middle attacks from occurring during the communication process.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces a security context as an intermediary layer that mediates between the communication parties. This security context encapsulates cryptographic credentials and communication parameters, providing an additional protective layer that prevents direct interception and authentication of communication channels.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If comprehensive security measures are implemented, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple security functions including key generation, certificate management, encryption, and authentication into a unified security context. This consolidation integrates diverse security measures into a single coherent structure, reducing overall system complexity while maintaining comprehensive security protection across multiple devices and platforms.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS11159310B2Digital security bubble
Publication Date: 2021.10.26 AMAZON TECH INC
  • US11159310B2 patent drawing
  • US11159310B2 patent drawing
  • US11159310B2 patent drawing

AI summary

A digital security bubble encapsulation is disclosed. A public key and a device identifier of at least one recipient is requested from a first server. A message containing one or more components is encrypted using a symmetric key. The symmetric key is encrypted with a public key received in response to the request. The encrypted message, the encrypted symmetric key, and the device identifier are encapsulated in a digital security bubble encapsulation. The digital security bubble encapsulation is transmitted to a second server.