Encrypted Data Exchange Over Non-Overlapping Network Paths
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encrypted communication technologies face vulnerabilities and key distribution challenges when sharing data between distant communication devices, particularly in common key type encrypted communication, and public key type encrypted communication has known vulnerabilities.
Innovation Solution
A communication system where each device performs encryption and decryption operations satisfying the commutative and associative laws, with data encrypted twice and decrypted once, and using non-overlapping network paths to prevent unauthorized access to shared data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If common key type encrypted communication is used between two communication devices located far apart, then encrypted communication can be executed, but it requires the two communication devices to share the same key in advance, which is extremely difficult to achieve securely
Solution Approach 1:
The patent introduces a third communication device as an intermediary to facilitate key distribution. The third device generates a random number and securely transmits parts of it to both the first and second communication devices, enabling them to derive a common key without direct key exchange between distant devices
Solution Approach 2:
The patent segments the key generation process by dividing the random number into multiple parts. Each communication device receives a different part of the segmented random number, and they combine these parts to generate the common key, eliminating the need for direct key sharing between distant devices
2Device complexity
If public key type encrypted communication is used to solve key distribution, then key distribution problem is addressed, but vulnerabilities have been discovered in the technology
Solution Approach 1:
The patent uses a random number that is generated for a single use and then discarded. This disposable approach ensures that even if the communication channel is compromised, the random number cannot be reused for other communications, eliminating vulnerabilities associated with reusable keys
Solution Approach 2:
The third communication device autonomously generates the random number and manages the distribution process without requiring pre-shared secrets or complex key management protocols between the first and second devices, simplifying the system while maintaining security
3Ease of operation
If the same communication path is used for transmitting encrypted data, then transmission is simplified, but a malicious third party can tap all transmitted data including encrypted forms that could reveal keys
Solution Approach 1:
The patent segments the communication path into multiple independent paths. Different encrypted data are transmitted through different paths, so that even if one path is tapped, the attacker cannot obtain all the data needed to compromise the security
Data Source
AI summary
To securely and easily share shared data between two communication devices which execute encrypted communication, a first communication device encrypts the shared data into first encrypted data (Step S503), and transmits the first encrypted data to a second communication device by using a first path on a network (Step S504). The second communication device receives the first encrypted data (Step S601), further encrypts the first encrypted data into second/first encrypted data (Step S602), and transmits the second/first encrypted data to the first communication device by using a second path (Step S603). The first communication device receives the second/first encrypted data (Step S505), executes an inverse transformation on the second/first encrypted data to obtain second encrypted data (Step S506), and transmits the second encrypted data to the second communication device by using a third path (Step S507). The second communication device receives the second encrypted data (Step S604), and executes an inverse transformation on the second encrypted data to turn the second encrypted data back into the shared data (Step S605). The first path and the second path do not overlap.