Hybrid Asymmetric-Symmetric Encryption for High-Speed Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems face challenges in securely transmitting symmetric keys across unsecure networks, leading to vulnerabilities in key establishment, particularly in high-speed data transfer applications like media streaming and large file transfers, where security and speed are interrelated with usability and key management complexities.
Innovation Solution
A method that derives a common secret key from asymmetric cryptography key pairs at both nodes without transmitting it, using this key as a seed for a pseudo-random number generator to produce encrypted data, ensuring secure and fast encryption suitable for streaming and large data transfers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If symmetric-key algorithms are used for high-speed encryption, then encryption speed is improved, but security deteriorates due to vulnerable key transmission over unsecure networks
Solution Approach 1:
The patent introduces an asymmetric key pair as an intermediary mechanism. The public key acts as a mediator that enables secure exchange of information over unsecure networks without directly transmitting the secret key. This resolves the contradiction by allowing symmetric-key encryption speed while eliminating key transmission vulnerability through the public key intermediary.
Solution Approach 2:
The patent segments the cryptographic system into two distinct parts: asymmetric key exchange for secure key establishment and symmetric-key encryption for high-speed data encryption. This segmentation allows each part to optimize for its specific function - security for key exchange and speed for data encryption - thereby resolving the contradiction between security and speed.
2Reliability
If asymmetric-key cryptography is used for secure key exchange, then security is improved, but computational expense increases making it unsuitable for high-speed encryption
Solution Approach 1:
The patent divides the cryptographic process into two segments: asymmetric key exchange performed once for secure key establishment, and symmetric-key encryption performed continuously for high-speed data processing. This segmentation eliminates the computational burden of using asymmetric encryption for all operations while maintaining security through the initial asymmetric key exchange.
Solution Approach 2:
The patent performs the computationally expensive asymmetric key exchange as a preliminary action before high-speed symmetric encryption begins. By completing the security setup in advance, the system eliminates ongoing computational overhead during data encryption, thereby achieving both high security and high throughput.
3Reliability
If physical delivery of symmetric keys is used, then key transmission security is improved, but ease of operation deteriorates due to inability to transmit keys electronically
Solution Approach 1:
The patent uses the public key as an intermediary that enables electronic transmission of key establishment information without compromising security. Instead of physical delivery, the public key mediates the secure exchange of cryptographic material over electronic networks, thereby maintaining security while dramatically improving ease of operation.
Data Source
AI summary
The present disclosure relates to highly secure, high speed encryption methodologies suitable for applications such as media streaming, streamed virtual private network (VPN) services, large file transfers and the like. For example, encryption methodologies as described herein can provide stream ciphers for streaming data from, for example, a media service provider to a plurality of users. Certain configurations provide wire speed single use encryption. The methodologies as described herein are suited for use with blockchain (e.g. Bitcoin) technologies.