Dynamic Key TLS Handover for Packet-Capture-Resistant Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission methods using static keys in TLS are vulnerable to attacks, leading to potential data leakage due to key analysis and cracking, and are susceptible to packet capturing tools.
Innovation Solution
Implement a managed mode transport layer security protocol that generates dynamic keys and encrypts them as strings, using a customized protocol to prevent interception and cracking, ensuring secure data transmission by encrypting data with dynamic keys and transmitting them as encrypted strings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static keys are used in TLS for data encryption, then data transmission can be established, but the keys are vulnerable to analysis and cracking attacks
Solution Approach 1:
The patent applies the Dynamics principle by transitioning from static encryption keys to dynamic keys that change with each communication session. The server generates a new key pair for each session, and the public key is dynamically provided to the client for encrypting data. This ensures that even if one session's key is compromised, other sessions remain secure, directly resolving the vulnerability to key analysis and cracking attacks.
Solution Approach 2:
The patent implements Parameter changes by modifying the encryption key parameter from a fixed static key to a variable dynamic key that changes per session. The server generates different key pairs for different sessions, and the public key parameter is dynamically updated and provided to the client. This parameter change makes key cracking ineffective across different sessions.
2Reliability
If customized protocols are implemented to prevent packet capturing, then security is improved, but protocol complexity increases
Solution Approach 1:
The patent applies the Intermediary principle by introducing a customized protocol layer between the standard TLS protocol and the application layer. This intermediary protocol handles the dynamic key exchange and data encryption/decryption processes, isolating the complexity from the standard TLS implementation while providing enhanced security against packet capturing tools.
Solution Approach 2:
The patent implements Segmentation by separating the security functions into distinct protocol layers: the standard TLS protocol handles basic transport security, while the customized protocol layer handles dynamic key exchange and application-specific encryption. This segmentation allows each layer to focus on its specific function, managing overall system complexity while achieving enhanced security.
Data Source
AI summary
Embodiments of the present application disclose a data transmission method performed by a computer device. The method includes: transmitting a handshake request to a server by means of a first transport layer security protocol between an applet running in the computer device and a server; receiving a dynamic key and an encrypted string obtained according to the dynamic key that are returned by the server by means of the first transport layer security protocol; encrypting to-be-transmitted data by using the dynamic key to obtain a ciphertext; and transmitting the ciphertext and the encrypted string to the server by means of a second transport layer security protocol that is different from the first transport layer security protocol, wherein the server is configured to decrypt the encrypted string to obtain the dynamic key, and decrypt the ciphertext by using the dynamic key to obtain decrypted data.