End-to-End Encrypted Message Routing for Credential Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission systems lack end-to-end encryption in multi-party interactions, exposing sensitive information like BIN and PAN to unauthorized access and man-in-the-middle attacks, and require burdensome management of multiple cryptographic keys.
Innovation Solution
Implementing end-to-end encryption of sensitive information using a user device that determines routing options and encrypts credentials or tokens, allowing secure transmission through a network without exposing sensitive data to intermediate nodes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If end-to-end encryption is implemented, then data security and privacy are improved, but the ability to route messages through nodes is compromised
Solution Approach 1:
The patent introduces routing information as an intermediary element that enables nodes to forward encrypted messages without decrypting them. The routing information is embedded in the encrypted message structure, allowing intermediate nodes to route the message based on this metadata while the actual sensitive payload remains encrypted and unreadable to them.
Solution Approach 2:
The patent segments the message into distinct components: routing information and encrypted sensitive data. The routing information can be processed by intermediate nodes independently of the encrypted payload, enabling them to forward the message without accessing the sensitive contents. This segmentation allows security and routing functionality to operate independently.
2Reliability
If point-to-point encryption schemes are used, then information protection between nodes is improved, but the complexity of managing multiple cryptographic keys increases
Solution Approach 1:
The patent employs a universal encryption scheme where a single encryption key or encryption mechanism can be used across multiple point-to-point connections. Instead of requiring unique key pairs for each node connection, the system uses a common encryption approach that works throughout the entire message routing path, significantly reducing key management complexity while maintaining protection.
3Productivity
If static routing paths are used, then message transmission efficiency is improved, but flexibility to adapt to network conditions is reduced
Solution Approach 1:
The patent implements dynamic routing by allowing the routing information to be updated and reconfigured during message transmission. The system can switch between different routing paths based on network conditions, and the routing decisions can be made adaptively without requiring decryption of the message payload, maintaining both efficiency and flexibility.
Data Source
AI summary
A method is disclosed. The method includes receiving, by a user device from the access device, a routing path list comprising a first set of network nodes. After receiving the routing path list, the user device determines a routing options list comprising a second set of network nodes based on the first set of network nodes in the routing path list. The method also includes obtaining an encrypted credential or token, and transmitting, by the user device to the access device, the routing options list, and the encrypted credential or token to the access device. The access device transmits an authorization request message comprising the encrypted credential or token, and the routing options list to a server computer via at least some of the network nodes in the second set of network nodes. The server computer may be an authorizing entity computer.