Encryption Key Derivation via Shared Secret and Prime Numbers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data encryption systems are vulnerable to hackers accessing secret keys stored on computers, making it easier for them to decrypt encrypted data, and the frequent rotation of keys is burdensome and does not protect previously compromised data.
Innovation Solution
A method involving the use of prime numbers and random numbers to generate and transmit a shared secret, allowing the recipient to calculate the encryption key without directly receiving it, and deleting the key after encryption to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secret keys are stored on computers for encryption, then data can be encrypted and decrypted, but hackers can access the stored keys to decrypt encrypted data
Solution Approach 1:
The patent extracts the key generation process from local storage by having the recipient calculate the decryption key remotely based on shared public parameters. The key is never stored on either device but is derived on-demand through mathematical operations using public keys and random numbers exchanged between sender and recipient.
Solution Approach 2:
The patent introduces a mathematical intermediary system based on modular arithmetic and public key cryptography. The shared public parameters and random numbers serve as intermediaries that enable both parties to compute the same decryption key without directly transmitting or storing it, creating a secure channel through mathematical relationships.
2Reliability
If encryption keys are periodically rotated, then future messages are protected from compromised keys, but the process is burdensome and does not protect previously compromised data
Solution Approach 1:
The patent implements dynamic key generation where new decryption keys are automatically created for each message based on current shared public parameters and random numbers. This eliminates static, pre-generated keys and replaces them with dynamically computed keys that are fresh for each communication session, eliminating the need for manual rotation while maintaining security.
Solution Approach 2:
The system performs self-service key generation where the recipient automatically calculates the decryption key using their private key components and the sender's public parameters. This eliminates the need for manual key distribution and rotation operations, as the system autonomously generates and manages keys for each message.
3Ease of operation
If the encryption key is made available for extended periods, then decryption can be performed, but hackers have more time to discover the key
Solution Approach 1:
The patent implements periodic key generation where a new decryption key is created for each message transmission. The key is generated periodically based on the message being sent, using current shared public parameters and random numbers. This ensures that each key has limited exposure time corresponding to the duration of the specific communication session, after which it is discarded and replaced.
Data Source
AI summary
An improved method for data encryption has been developed. The method includes storing data, multiple prime numbers and random numbers within an electronic memory storage device. Next, calculating a public number using the multiple prime numbers and providing a public number to a recipient apparatus that has knowledge of the multiple prime numbers. The method then encrypts the stored data with a randomly generated key and deletes the randomly generated key after use. Next, the method calculates a common shared secret between the sender and recipient using the prime numbers, a recipient public number and the second random number. The sender and recipient calculate parameters using a key equation based on the randomly generated key and random numbers and a common shared secret. Finally, the recipient calculates the randomly generated key for decryption using the common shared secret, one of the prime numbers, the parameters and the simultaneous equations for decryption of the data.