Encrypted PII Matching Platform Against Dictionary Attacks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cryptographic communication methodologies are vulnerable to cyber threats and key management errors, compromising data security and privacy, particularly in the face of evolving dictionary attacks.

Innovation Solution

A cryptographic communication platform involving a first and second server generating anonymized ciphertexts from user PII, which are then matched by a buffer server without transmitting the actual PII, using cryptographic hash functions and key management systems to ensure secure transactions/interactions between parties.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic communication methodologies are used to protect data security, then confidentiality and integrity are improved, but vulnerability to dictionary attacks and key management errors increases

Engineering Contradiction:
Improvedata securityVSAvoidvulnerability to dictionary attacks
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a buffer server as an intermediary component between communication parties. This buffer server stores ciphertext and manages the encryption/decryption process, isolating the key management from the communication flow. The buffer server acts as a mediator that handles key distribution and ciphertext management, reducing the attack surface for dictionary attacks while maintaining data confidentiality.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the cryptographic communication system into distinct functional components: encryption modules, decryption modules, and a buffer server. Each component has a specific responsibility, with the buffer server handling key management and ciphertext storage separately from the actual communication. This segmentation allows for more targeted security measures and reduces the impact of potential key management errors.

Inventive Principle:
Principle #1Segmentation

2Productivity

If PII is transmitted for communication between parties, then transaction capability is improved, but privacy protection deteriorates

Engineering Contradiction:
Improvetransaction capabilityVSAvoidprivacy protection
Core Design Contradiction:
ProductivityVSLoss of information

Solution Approach 1:

The patent extracts and removes personally identifiable information (PII) from the communication process. Instead of transmitting actual PII between parties, the system uses a buffer server that stores and manages ciphertext representations. The buffer server enables transaction capability by matching ciphertexts without exposing underlying PII, thus extracting the essential functionality while removing the privacy risk.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent creates and uses ciphertext copies of PII instead of transmitting the actual PII. The buffer server stores and operates on these ciphertext representations, which are functional copies that enable transaction matching and verification without revealing the original personal information. This copying approach maintains transaction capability while protecting privacy.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS20250350444A1Platform and method for encrypted interaction
Publication Date: 2025.11.13 HOOXPAY LTD
  • US20250350444A1 patent drawing
  • US20250350444A1 patent drawing
  • US20250350444A1 patent drawing

AI summary

Disclosed herein is a platform for secured communication between two or more parties, comprising: a first server comprising a first processor executing a code configured to: receive a personally identifiable information (PII) of a user of a first party; generate a first ciphertext from the PII; transmit the first ciphertext, such that transmitting the PII is avoided; a second server comprising a second processor executing a code configured to: receive PII of a user of a second party; generate a second ciphertext from the PII; transmit the second anonymized ciphertext, such that transmitting the PII is avoided; and a buffer server comprising a third processor executing a code configured to: receive and store the first and the second ciphertexts; search for a match between the first and the second ciphertexts, thereby allowing performing a transaction/interaction between the first and the second party without transmitting the PII of users therebetween.