Encryption Terminal One-Time Key Algorithm Delivery

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The existing method for delivering encryption algorithms through a network is vulnerable to decryption by outsiders if the common key is leaked, resulting in insufficient security for encrypted communication.

Innovation Solution

An encryption terminal and management device that utilize a one-time pad method with a first and second one-time key, where the encryption algorithm is encrypted with the first key and decrypted using the second key stored in a key table, enhancing security by preventing key leakage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a common key is used to encrypt and deliver encryption algorithms through a network, then the encryption algorithm can be delivered to terminal devices, but the security is compromised when the common key is leaked

Engineering Contradiction:

Improvesecurity of encrypted communicationVSAvoidvulnerability to decryption by outsiders

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The encryption system is segmented into multiple independent components: the encryption algorithm itself, the first one-time key for encrypting the algorithm, and the second one-time key stored in the key table for decrypting it. This segmentation ensures that compromise of one component does not necessarily lead to compromise of the entire system.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The first one-time key acts as an intermediary that encrypts the encryption algorithm during transmission. The second one-time key in the key table serves as another intermediary for decryption. These intermediary keys protect the actual encryption algorithm from being exposed during network transmission.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If embedded encryption algorithms are used in terminal devices, then encrypted communication can be performed, but the algorithms can be compromised by attacks and enhanced computational capability

Engineering Contradiction:

Improveability to perform encrypted communicationVSAvoidcompromise by attacks and computational attacks

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The encryption algorithm is not statically embedded but dynamically delivered and updated through the network. The terminal device receives updated encryption algorithms encrypted with one-time keys, allowing the system to adapt to new security requirements and counter emerging attacks.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The encryption algorithm is treated as a temporary, disposable object that is delivered, used, and then replaced with new algorithms. The one-time keys are also single-use and discarded after decryption, preventing long-term exposure and reuse attacks.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

3Productivity

If encryption algorithms are delivered through a network, then terminal devices can obtain updated algorithms, but the delivery process is vulnerable to key leakage

Engineering Contradiction:

Improveability to deliver and update encryption algorithmsVSAvoidsecurity during delivery process

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The terminal device preliminarily stores the second one-time key in its key table before the actual encryption algorithm delivery occurs. This preliminary preparation ensures that when the encrypted algorithm is received, it can be immediately and securely decrypted without requiring additional key exchange or communication during the critical decryption phase.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12335386B2Encryption terminal, encryption management device, encrypted communication system, and method

Publication Date: 2025.06.17 NEC CORP

AI summary

An encryption terminal includes a terminal communication unit that receives an encryption algorithm for creating ciphertext from plaintext, the encryption algorithm being encrypted using a first one-time key in a one-time pad method, a terminal storage unit that stores a key table containing a second one-time key corresponding to the first one-time key, and a decryption unit that decrypts the encrypted encryption algorithm by using the second one-time key.