Dynamic Encryption Using Wireless Device Digest Values
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password protection methods are inadequate due to the likelihood of simple, unchanging passwords and the ease with which unauthorized users can access multiple files using a single password, leading to compromised data security.
Innovation Solution
A dynamic encryption arrangement that employs an encryption/decryption engine and a protection communication-enabled (PCE) wireless device, where a digest value is used to encrypt a flag string and combine it with a user's password, requiring both the password and the PCE wireless device's unique digest value for decryption, providing additional layers of protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password protection is used to encrypt files, then data security is improved, but unauthorized users can still access files using simple passwords or brute force attacks
Solution Approach 1:
The encryption key is segmented into two parts: a password component and a device-specific digest value component. The digest value is derived from the wireless device's unique identification, separating the key material from user-controlled passwords to individual device instances. This segmentation prevents unauthorized access even if one component is compromised.
Solution Approach 2:
A transmission application program acts as an intermediary between the encryption/decryption engine and the wireless device. This intermediary manages the digest value extraction and key combination process, providing a secure interface that enhances the overall encryption system without requiring direct access to sensitive materials.
2Reliability
If users create multiple passwords to protect different files, then data security is improved, but users cannot remember a large number of passwords
Solution Approach 1:
The wireless device with its unique digest value serves as a universal security credential that can protect multiple files and data sets. Instead of requiring separate passwords for each file, the same device-based authentication mechanism works across multiple encrypted resources, simplifying user memory requirements while maintaining security.
Solution Approach 2:
The system automatically generates and manages the digest value from the wireless device's unique identification through the transmission application program. This self-service mechanism eliminates the need for users to manually create and remember multiple complex passwords, as the device itself provides the security credential.
3Reliability
If users change passwords frequently to maintain security, then data security is improved, but users are unlikely to change passwords unless compromised
Solution Approach 1:
The encryption key becomes dynamic and device-specific rather than static and user-defined. Each wireless device generates a unique digest value that automatically updates the encryption key for that specific device-instance combination. This dynamic approach allows security credentials to change based on device identity rather than requiring periodic user-initiated password changes.
4Ease of operation
If a single password is used across multiple files, then ease of operation is improved, but unauthorized access to one file compromises all files
Solution Approach 1:
The encryption key has local quality specific to each device instance through the device-specific digest value. While users interact with a single universal password interface, the actual encryption key varies locally for each wireless device based on its unique identification. This ensures that compromise of one device's access does not automatically grant access to other devices or file instances.
Data Source
AI summary
A method for encrypting a file using a combination of an electronic device and a protection communication-enabled (PCE) wireless device is provided. The method includes using an encryption/decryption engine executing on the electronic device to encrypt a first flag string, which is a binary string stored in a header of the file, with a digest value to create an encrypted flag string. The digest value is associated with the PCE wireless device, which is a device having a transmission application program installed thereon for enabling interaction between the PCE wireless device and the encryption/decryption engine. The method also includes encrypting at least a portion of the file using the digest value and a first password provided by a user, thereby generating an encrypted file that includes an encrypted version of at least a portion of the file, the encrypted flag string, and the first flag string.


