Dynamic Encryption Key Indexing for Terminal Server Sessions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption methods between terminals and servers rely on static keys, which can be vulnerable to cracking and do not provide dynamic security updates during sessions, limiting the efficiency and reliability of secure communication channels.
Innovation Solution
A method for dynamic encryption and signing is introduced, where both terminals and servers generate and manage keys and signatures using index-based access, allowing for random selection and updating of keys and signatures during session connections, ensuring continuous encryption channel security through a login session object.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If static keys are used for encryption between terminal and server, then encryption efficiency is improved, but security reliability deteriorates due to vulnerability to cracking and lack of dynamic updates
Solution Approach 1:
The patent implements dynamic key selection during session connection. Instead of using a fixed static key, the system randomly selects keys from a pre-shared pool of multiple keys between terminal and server. This dynamic approach prevents static key cracking while maintaining encryption efficiency through optimized key management and selection mechanisms.
Solution Approach 2:
The patent changes the encryption parameter from a single static key to multiple keys with different weights. The system maintains a pool of keys with varying probability weights, allowing random selection based on these weights. This parameter change enables both efficient encryption operations and enhanced security through key diversity and unpredictability.
2Reliability
If multiple keys are managed with index-based access for dynamic selection, then security reliability is improved through dynamic updates, but device complexity increases due to key management overhead
Solution Approach 1:
The patent segments the key management system into distinct components: a key pool containing multiple encryption keys, weight assignments for each key, and an index-based selection mechanism. This segmentation allows independent management of key storage, weight configuration, and random selection processes, reducing overall system complexity while enabling dynamic key updates.
Solution Approach 2:
The patent uses index-based access to reference keys in the key pool without duplicating the actual key material. Instead of storing multiple copies of keys, the system maintains lightweight index references that point to keys in the shared pool. This copying approach reduces memory overhead and simplifies key management while maintaining security through indirect access.
Data Source
AI summary
A method for dynamic encryption and signing includes: obtaining, by a terminal during session connection, a predetermined first key index and a randomly-generated first signature index; signing session request data with a first signature corresponding to the first signature index; encrypting the session request data with a first key corresponding to the first key index; sending the encrypted session request data and the first signature index to the server; and receiving, from the server, session response data signed with a second signature corresponding to a second signature index and encrypted with a second key corresponding to a second key index, after decryption and signature verification by the server over the session request data succeed. The second signature index and the second key index are randomly selected by the server and saved in a login session object accessible by both the server and the terminal.


