Group Communication Encryption Using Shared Symmetric Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional encryption systems are inefficient and vulnerable to attacks when secret information is publicly known, especially in group communications, as they require complex key management and are prone to compromises.
Innovation Solution
A method generating a shared symmetric key for group communication sessions, allowing users to encrypt and decrypt messages within the session using this key, with the ability to add or change users by redistributing the key, reducing the need for long-lived sessions and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric encryption is used for group communication, then security is improved, but computational efficiency deteriorates and complexity increases
Solution Approach 1:
The encryption system is segmented into two distinct components: asymmetric encryption for key exchange and symmetric encryption for message encryption. This segmentation allows each encryption type to be used for its optimal purpose, resolving the contradiction between security and efficiency.
Solution Approach 2:
A shared symmetric key acts as an intermediary between asymmetric and symmetric encryption. The asymmetric encryption securely transmits this intermediary key, which then enables efficient symmetric encryption for all subsequent communications, combining the security benefits of asymmetric encryption with the efficiency of symmetric encryption.
2Ease of operation
If secret information is distributed among group members, then communication functionality is improved, but vulnerability to attacks increases
Solution Approach 1:
The system dynamically manages the shared symmetric key based on group composition changes. When members are added or removed, the key is regenerated and redistributed only to current members, ensuring that secret information distribution always matches the current group structure and minimizing exposure risk.
Solution Approach 2:
The system changes the cryptographic parameters by regenerating the shared symmetric key whenever group membership changes. This parameter change ensures that even if an attacker obtains old key material, it becomes useless for decrypting new communications, reducing vulnerability over time.
3Duration of action of stationary object
If long-lived encryption sessions are maintained, then communication continuity is improved, but exposure to private information increases
Solution Approach 1:
The system implements periodic regeneration of the shared symmetric key based on group membership changes rather than maintaining a static key throughout the session. This periodic refresh of cryptographic parameters maintains session continuity while periodically reducing exposure to private information by invalidating old key material.
Data Source
AI summary
Embodiments herein include, for example, a method, comprising: generating a shared symmetric key to begin a communication session among a group of users by a first user; distributing, by the first user, the generated shared symmetric key to each user in the group of users; communicating within the communication session among a group of users, where each user encrypts a message to the group of users to be distributed through the communication session using the generated shared symmetric key, and each user decrypts a message received from the communication session using the generated shared symmetric key.