Encryption System Using Seed-Based Key Derivation for High-Speed Streaming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems face challenges in securely establishing symmetric keys across unsecure networks, balancing security and speed, especially in applications like media streaming and large data transfers, and are often cumbersome to set up and manage.
Innovation Solution
A computer-implemented method that derives a secret key from a common secret known by both nodes using asymmetric cryptography key pairs, utilizing this key as a seed for a pseudo-random number generator to produce encrypted data, which is then transmitted, without requiring key transmission over the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If symmetric-key algorithms are used for encryption, then encryption speed is improved, but secure key transmission becomes problematic
Solution Approach 1:
The patent introduces a trusted third party (key distribution center) as an intermediary to securely distribute symmetric keys. This mediator generates keys and distributes them through secure channels, eliminating the need for direct key transmission between communicating parties and resolving the contradiction between fast symmetric encryption and secure key delivery
Solution Approach 2:
The patent replaces the mechanical/physical key distribution mechanism with an electronic key management system. Instead of physically delivering keys, the system uses electronic key distribution through trusted centers, enabling faster key provisioning while maintaining security through controlled access and audit trails
2Reliability
If asymmetric-key algorithms are used for secure key exchange, then key transmission security is improved, but encryption speed deteriorates
Solution Approach 1:
The patent segments the cryptographic process into two distinct phases: a one-time asymmetric key exchange phase for secure key distribution, followed by efficient symmetric encryption phase for bulk data transmission. This segmentation allows each algorithm to be used where it is most effective, resolving the speed-security tradeoff
Solution Approach 2:
The patent performs the computationally intensive asymmetric key exchange as a preliminary action before the main data transmission. By completing the secure key establishment upfront, the system enables subsequent high-speed symmetric encryption without repeated computational overhead, improving overall productivity while maintaining security
3Reliability
If physical delivery of symmetric keys is used, then key transmission security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent replaces physical key delivery mechanisms with electronic key distribution systems. Instead of requiring physical transport of encrypted keys, the system uses secure electronic channels managed by key distribution centers, dramatically improving ease of operation while maintaining security through cryptographic protection and access control
Solution Approach 2:
The patent implements automated key generation and distribution systems that operate without manual intervention. The key distribution center automatically generates keys, manages their lifecycle, and distributes them to authorized parties, eliminating the operational complexity of manual key management while maintaining high security standards
Data Source
AI summary
The present disclosure relates to highly secure, high speed encryption methodologies suitable for applications such as media streaming, streamed virtual private network (VPN) services, large file transfers and the like. For example, encryption methodologies as described herein can provide stream ciphers for streaming data from, for example, a media service provider to a plurality of users. Certain configurations provide wire speed single use encryption. The methodologies as described herein are suited for use with blockchain (e.g. Bitcoin) technologies.