Dual-Key Encrypted Payload Exchange for Secure Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data exchange methods face challenges in providing secure and easy-to-handle data transfer, particularly in protecting against brute-force attacks and managing complex key procedures.
Innovation Solution
A method involving the exchange of an encrypted payload using two distinct keys: a first key for decryption and a second key for access, where the first key is different from the second key, and both keys can be generated using private data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric encryption is used to provide secure data exchange, then security is improved, but users must master sophisticated procedures for handling private/public keys which increases operational complexity
Solution Approach 1:
The patent segments the encryption key into two distinct parts: a first key for encrypting the payload and a second key for accessing the encrypted payload. This segmentation allows each key to have a specific, simplified function rather than requiring users to manage complex asymmetric key pairs, thus improving ease of operation while maintaining security
Solution Approach 2:
The patent introduces a server as an intermediary that stores the encrypted payload and facilitates key exchange. The server acts as a mediator that enables secure data exchange without requiring users to directly manage complex cryptographic procedures, simplifying the operational process while maintaining security
2Reliability
If symmetric encryption is used with strong passwords to withstand brute-force attacks, then security is improved, but the passwords become hard to handle and exchange
Solution Approach 1:
The patent segments the cryptographic function into two separate keys with distinct purposes: the first key (which can be weaker) is used for encryption, while the second key (which is strong and secure) is used for access. This segmentation allows the use of easier-to-handle encryption keys while maintaining security through the strong access key, thus improving ease of operation without sacrificing security
Solution Approach 2:
The patent performs preliminary encryption of the payload with the first key before exchange, and the recipient generates the second key from exchanged data. This preliminary action allows the use of weaker, easier-to-exchange data for the encryption phase while the strong second key is generated later for secure access, improving password handling ease while maintaining security
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Described is a method comprising: exchanging an encrypted payload (108) between a sender unit (102) and a recipient unit (104); using a first key (126) for decryption of the encrypted payload (108); using a second key (110) for providing access to the encrypted payload (108); the first key (126) being different from the second key (110). Further described are a communication network (100), individual units (102, 104, 106) thereof as well as methods for operating the units (102, 104, 106).