Hybrid Cryptographic System for Fleet Vehicle Data Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic methods face challenges in securely distributing encrypted data to multiple recipients, particularly in scenarios where public keys may change, such as in a fleet of vehicles, leading to high operational overhead and increased risk of key compromise.
Innovation Solution
A hybrid cryptographic system where a shared symmetric key is stored on a client's trusted platform, used to encrypt an asymmetric key pair, and a temporary symmetric key is used to encrypt the data package, reducing the need for frequent key updates and minimizing key management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key encryption is used for each recipient, then security is improved, but operational overhead increases significantly when distributing to multiple recipients
Solution Approach 1:
The patent segments the encryption process into two distinct parts: (1) a single symmetric key encrypts the entire data package, and (2) individual asymmetric key pairs encrypt only the symmetric key for each recipient. This segmentation allows the efficient symmetric encryption to handle the bulk data while the less efficient asymmetric encryption is applied only to small key portions, resolving the contradiction between security and operational overhead.
Solution Approach 2:
The patent introduces a symmetric key as an intermediary between the asymmetric key pairs and the data package. Instead of each asymmetric key pair directly encrypting the data (which would be inefficient), the symmetric key acts as a mediator that the asymmetric keys protect. This intermediary approach maintains security while dramatically reducing the computational overhead for multi-recipient distribution.
2Productivity
If symmetric key encryption is used with a shared key, then operational overhead is reduced, but security risk increases due to frequent key usage and potential compromise
Solution Approach 1:
The asymmetric key pairs serve as intermediaries that protect the symmetric key without being directly exposed to the data encryption/decryption process. The symmetric key is used efficiently for data operations while the asymmetric keys provide security protection, creating a layered approach that maintains both efficiency and security.
Solution Approach 2:
The patent effectively creates disposable encryption sessions where temporary symmetric keys are generated for each data package encryption. These temporary keys are used once and then discarded, while the permanent asymmetric key pairs remain secure in the key ring. This approach allows frequent symmetric key usage without compromising long-term security.
3Reliability
If public keys are updated frequently to maintain security, then security is improved, but key management complexity increases
Solution Approach 1:
The patent merges multiple asymmetric key pairs into a single key ring structure that can be managed as one unit. Instead of managing separate key update processes for each recipient, the system combines all public keys into a shared key ring that can be updated collectively, reducing key management complexity while maintaining security.
Solution Approach 2:
The key ring structure serves multiple functions: it stores multiple public keys, enables collective key management, and provides a unified interface for encryption operations. This multi-functional approach simplifies key management while maintaining the ability to update keys securely across all recipients.
4Reliability
If asymmetric key pairs are stored on each client, then security is improved, but storage requirements and device complexity increase
Solution Approach 1:
The patent merges multiple asymmetric key pairs into a consolidated key ring stored on the client device, rather than distributing separate key pairs to each recipient. This consolidation reduces the total storage requirements while maintaining security, as the key ring efficiently packs and manages multiple keys in a unified structure.
Data Source
AI summary
A hybrid encryption method for securely transferring an electronic data package from a sender to a plurality of clients. The method comprises storing a shared symmetric key on each of the clients. The sender encrypts a private key of an asymmetric key pair using the shared symmetric key. The sender encrypts the data package with a temporary symmetric key to generate an encrypted data package. The sender encrypts the temporary symmetric key with the public key of the asymmetric key pair to generate an encrypted temporary symmetric key. The sender transmits the encrypted data package, the encrypted temporary symmetric key, and the encrypted private key to the clients. Each client decrypts the encrypted data package by: using the shared symmetric key to decrypt the encrypted private key; using the decrypted private key to decrypt the encrypted temporary symmetric key, and using the decrypted temporary symmetric key to decrypt the encrypted data package.