Handshake-Free Encrypted Communication via Symmetric Key Caching

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing encrypted communication protocols, such as HTTPS, require a handshake process that introduces delays, particularly in mobile networks with long round-trip times, which degrades user experience by necessitating additional messages for establishing a secure channel.

Innovation Solution

Implementing handshake-free encrypted communication using symmetric key caching, where an ongoing communication relationship between devices maintains a changing cached symmetric encryption key, eliminating the need for the handshake process by leveraging an existing shared secret.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a handshake process is used to establish encrypted communication, then security is ensured through key exchange, but communication delay increases due to additional messages required

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication delay
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by establishing and caching symmetric encryption keys during an initial handshake process, so that subsequent communications can proceed without repeated key exchange. The cached keys are reused for multiple communication sessions, eliminating the need for time-consuming handshake processes in ongoing communications between the same devices.

Inventive Principle:
Principle #10Preliminary action

2Speed

If symmetric key caching is implemented for handshake-free communication, then communication speed improves by eliminating handshake overhead, but key management complexity increases

Engineering Contradiction:
Improvecommunication speedVSAvoidkey management complexity
Core Design Contradiction:
SpeedVSDevice complexity

Solution Approach 1:

The patent implements self-service through automatic key caching and retrieval mechanisms. The system automatically caches symmetric keys during initial handshakes, retrieves appropriate cached keys for subsequent communications, and manages key validity periods without requiring manual intervention. This automation reduces the perceived complexity for users while maintaining secure key management.

Inventive Principle:
Principle #25Self-service

3Productivity

If cached symmetric keys are reused for multiple communications, then overhead is reduced and efficiency improves, but security risk increases if keys are compromised

Engineering Contradiction:
Improvecommunication efficiencyVSAvoidsecurity risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent applies dynamics by implementing time-based key validity periods and automatic key rotation. Cached symmetric keys are assigned expiration times after which they can no longer be used, ensuring that even if a key is compromised, the window for potential security breaches is limited. The system dynamically manages key lifecycle including creation, caching, expiration, and rotation based on communication patterns and security requirements.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS10063527B2Techniques for handshake-free encrypted communication using symmetric key caching during request-and-response
Publication Date: 2018.08.28 META PLATFORMS INC
  • US10063527B2 patent drawing
  • US10063527B2 patent drawing
  • US10063527B2 patent drawing

AI summary

Techniques for handshake-free encrypted communication are described. An apparatus may comprise a key component, a message component, and a network component. The key component may be operative to retrieve a first symmetric encryption key from a key store and to store a second symmetric encryption key in the key store. The message component may be operative to construct a message comprising a data section, the data section encrypted using the first symmetric encryption key. The network component may be operative to transmit the message to a device and to receive a response to the message, the response comprising the second symmetric encryption key. Other embodiments are described and claimed.