Dynamic Custom Encryption Function for Secure Client-Server Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption techniques, such as DES, triple DES, and AES, are inadequate in providing high security for data encryption over computer networks due to their limitations in key size and susceptibility to advancements in technology, leading to potential decryption of encrypted data blocks.
Innovation Solution
A custom encryption function is generated by a device that verifies user credentials, retrieves a random function, and uses it to select parameters and values for a user function, combining various encryption functions and ciphers to create a unique encryption platform for secure communication between client and server devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard encryption techniques (DES, triple DES, AES) are used, then implementation is simple and widely supported, but security is inadequate due to key size limitations and susceptibility to technological advancements
Solution Approach 1:
The patent implements dynamic encryption by generating a unique custom encryption function for each application session. The encryption function changes over time based on session-specific parameters, making it adaptive rather than static. This resolves the contradiction by providing high security through dynamic key generation while maintaining implementation simplicity through standardized cryptographic operations.
Solution Approach 2:
The patent changes encryption parameters by selecting different algorithms, key lengths, and cryptographic operations based on security requirements and device capabilities. The system can adjust between symmetric and asymmetric encryption, modify key sizes, and change cryptographic algorithms dynamically, allowing high security without fixed complexity constraints.
2Reliability
If a custom encryption function is generated for each session, then security is enhanced, but computing resources and processing time increase
Solution Approach 1:
The patent performs preliminary actions by pre-generating and caching cryptographic parameters, random number seeds, and algorithm selections during session initialization. This preparation work is done before actual data encryption, reducing the computational burden during data processing and maintaining high productivity while achieving enhanced security.
Solution Approach 2:
The system uses device-specific identifiers and session information to self-generate encryption parameters without requiring external key distribution or complex coordination. Each device independently creates its own cryptographic keys and algorithms, reducing communication overhead and processing time while maintaining high security standards.
3Productivity
If encryption parameters are stored for future use, then processing speed improves, but security is compromised due to potential exposure of static keys
Solution Approach 1:
The patent implements periodic re-generation of encryption parameters at defined intervals or after specific events (e.g., session timeout, number of operations). This periodic refresh ensures that even if parameters are cached for speed, they remain secure due to regular rotation, resolving the contradiction between processing speed and security.
Solution Approach 2:
The system discards encryption parameters after use or after a defined validity period, and recovers them only when needed for new sessions. Cached parameters are systematically invalidated and removed, preventing long-term exposure while allowing short-term caching for performance optimization during active sessions.
Data Source
AI summary
A device receives credentials of a user of a client device that is accessing an application associated with a server device, and verifies the user based on the credentials of the user. The device retrieves, based on verifying the user, a random function from a random functions data structure associated with the device, and utilizes the random function to select parameters and values for a user function. The device utilizes the user function, the parameters, and the values to generate a custom encryption function, and encrypts the custom encryption function to form an encrypted custom encryption function. The device provides the encrypted custom encryption function to the client device and the server device to permit encrypted communication between the client device and the server device using the custom encryption function.