Cryptographic Handshake Segmentation for Security and Cost
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The implementation of cryptographic handshaking processes in computer security introduces security risks due to vulnerabilities in software-based servers, necessitating high-security measures that increase costs and development time.
Innovation Solution
Dividing the functionality of establishing a cryptographically secured connection between two computer systems into two blocks, where a less secure outward-facing block performs initial handshaking tasks while a more secure inward-facing block maintains key secrecy and performs critical authentication, ensuring overall security is governed by the more secure block.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If the server is implemented using software running on a processor, then the development cost and time are reduced, but the security risk increases due to potential software vulnerabilities
Solution Approach 1:
The server is divided into two separate blocks: a first block that handles outward-facing communications and a second block that handles inward-facing secure operations. This segmentation allows the system to use software-based implementation for the first block (reducing development cost and time) while using hardware-based implementation for the second block (improving security), thus resolving the contradiction between ease of manufacture and reliability.
2Reliability
If high security techniques are implemented in the server, then the security risk is reduced, but the development cost and time increase
Solution Approach 1:
High security techniques are applied locally only to the second block that handles sensitive cryptographic operations, while the first block uses standard software implementation. This local quality approach ensures that security is enhanced where most needed without incurring the full cost of high-security implementation across the entire system, thus resolving the contradiction between reliability and ease of manufacture.
3Reliability
If the server is wholly implemented in hardware, then the security is improved, but the development cost and time increase
Solution Approach 1:
The server functionality is segmented into two blocks with different implementation approaches: the first block uses software implementation for non-critical functions, while the second block uses hardware implementation for security-critical functions. This selective segmentation resolves the contradiction by achieving high security where needed without the prohibitive costs of full hardware implementation.
Data Source
AI summary
Portions of a functionality in the establishing of a cryptographically secured connection between first and second computer systems are divided between multiple blocks of the first computer system including a first block and a second block. The first block performs some of the work and the second block keeps secrets such as private keys and performs only a limited number of functions, relying on the first block to perform the remainder of the handshaking process.