Dynamic Encryption Algorithm Selection via Message Digest
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional protection schemes for confidential information in computer systems are inadequate as they only secure predefined entry points, failing to account for vulnerabilities that nefarious individuals can exploit to access sensitive data through knowledge of hardware and software systems, network connections, etc.
Innovation Solution
A method and system that generate a message digest using a secret, extracting algorithm selector bits and an encryption key to select and use an encryption algorithm, ensuring that both the encryption key and algorithm can change, making it difficult for unauthorized users to identify the correct communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional protection schemes are used to secure confidential information, then authentication credentials can protect predefined entry points, but the system remains vulnerable to exploitation through knowledge of hardware and software systems and network connections
Solution Approach 1:
The patent implements dynamic encryption where the encryption algorithm and key change continuously based on a secret and message digest generation. This dynamic approach prevents static vulnerability exploitation because the security parameters are not fixed but evolve over time, making it impossible for attackers to compromise the system through knowledge of predetermined hardware, software, or network configurations.
Solution Approach 2:
The system changes encryption parameters (algorithm and key) based on the secret and message digest. By varying these cryptographic parameters dynamically rather than using fixed values, the system eliminates vulnerabilities associated with static configuration knowledge, as each communication session uses unique encryption parameters that cannot be predicted or exploited through system reconnaissance.
2Reliability
If encryption is used to transform confidential information into unreadable format, then unauthorized access is prevented, but the system requires corresponding decryption keys which may be vulnerable to compromise
Solution Approach 1:
The system performs self-service key management through automated message digest generation from a secret. Rather than requiring manual key distribution and management, the encryption key is automatically derived from the secret and message digest, eliminating the need for separate key exchange protocols and reducing the attack surface associated with key management infrastructure.
Solution Approach 2:
The secret is established in advance as the foundation for generating encryption keys. By pre-establishing the secret and using it to generate message digests that become encryption keys, the system prepares the cryptographic parameters before communication occurs, ensuring that key management complexity is handled beforehand rather than during active communication.
3Ease of manufacture
If static encryption keys and algorithms are used, then implementation is simple, but unauthorized users can identify and exploit the correct communication through system knowledge
Solution Approach 1:
The patent implements dynamic selection of encryption algorithms and keys based on message digest generation from a secret. This dynamic approach maintains ease of implementation through automated processes while making communication identification extremely difficult, as the encryption parameters change continuously rather than remaining static and predictable.
Solution Approach 2:
The system changes encryption parameters (algorithm selector bits and encryption key) based on the message digest derived from the secret. By varying these parameters dynamically, the system maintains implementation simplicity through automated parameter generation while making it computationally infeasible for attackers to identify or predict the correct encryption parameters through system reconnaissance.
Data Source
AI summary
A method for securing communication between members. The method includes a first member obtaining a secret. An n-bit generator executing on the first member generates a message digest using the first secret. The first member extracts algorithm selector bits and an encryption key from the message digest, and selects an encryption algorithm identified by the algorithm selector bits. The method further includes the first member encrypting a communication using the encryption algorithm and the encryption key to obtain an encrypted communication, and the first member sending, to a second member of the group, the first encrypted communication.