Dual-Key Secure Messaging Encryption

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current secure messaging systems rely on a single decryption key for message access, which lacks control over access rights and flexibility in managing access after message transmission.

Innovation Solution

A method involving the use of two decryption keys, where the payload information is encrypted in two subsequent steps using different encryption keys, allowing access only when both keys are provided, and enabling control over access by the sender and recipient.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a single decryption key is used for message access, then the system is simple to operate, but the control over access rights and flexibility in managing access after message transmission is lost

Engineering Contradiction:

Improvemessage access simplicityVSAvoidaccess right control flexibility

Core Design Contradiction:

Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent divides the single decryption key into two separate decryption keys (first decryption key and second decryption key). The message is encrypted with both keys, and both keys are required for decryption. This segmentation allows the sender to control one key while the recipient controls the other key, enabling flexible access management after transmission while maintaining operational simplicity through automated key distribution mechanisms.

Inventive Principle:

Principle #1Segmentation

2Adaptability or versatility

If multiple decryption keys are required for message access, then control over access rights is improved, but the device complexity increases

Engineering Contradiction:

Improveaccess right control flexibilityVSAvoidkey management complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by automatically distributing the first and second decryption keys to the respective sender and recipient before message transmission. The sender receives the first decryption key and the recipient receives the second decryption key in advance. This preliminary key distribution simplifies the overall system complexity by automating key management, while still requiring both keys for message decryption, thus maintaining access control flexibility.

Inventive Principle:

Principle #10Preliminary action

3Ease of manufacture

If a single encryption step is used, then the manufacturing process is simple, but the security and control over message access is reduced

Engineering Contradiction:

Improveencryption process simplicityVSAvoidmessage access security

Core Design Contradiction:

Ease of manufactureVSReliability

Solution Approach 1:

The encryption process is segmented into two distinct steps: first encrypting the payload information item with the first encryption key, then encrypting the result with the second encryption key. This multi-step encryption process enhances security by requiring both encryption keys (and consequently both decryption keys) to access the message, while the systematic approach maintains ease of manufacture through standardized cryptographic operations.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS11683298B2Secure messaging

Publication Date: 2023.06.20 KOBIL SYST

AI summary

Disclosed herein is a method performed by an apparatus. In the method, a payload information item is obtained that is to be communicated to at least one recipient. An encrypted payload information item is obtained by encrypting said payload information item such that it is decryptable by use of a first decryption key and a second decryption key. Further, a message containing said encrypted payload information item is sent or triggered to be sent to said recipient.