In-band Encryption Key Exchange for Secure Sessions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure communication systems face challenges in updating encryption keys during encrypted calls, leading to issues like jitter, lost communications, and unauthorized participants due to out-of-band key transmission methods being unreliable or delayed.
Innovation Solution
A method for secure key exchange over a secure channel, allowing each participant to manage their own keys and stream identifiers, with a three-way handshake to negotiate and update encryption keys in real-time during a secure communication session.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If out-of-band communication is used to transmit encryption keys, then key transmission can be performed, but participants may not receive the key or the communication may be delayed, resulting in jitter, lost communications, or unauthorized participants
Solution Approach 1:
The patent merges the key transmission channel with the media communication channel by performing key exchange in-band. The encryption keys are transmitted within the same communication stream as the media data, eliminating the need for separate out-of-band key distribution channels. This integration ensures that key updates occur simultaneously with media transmission, preventing delays and synchronization issues.
Solution Approach 2:
The patent introduces a session manager as an intermediary that coordinates the key exchange process between participants. The session manager facilitates the negotiation of encryption keys and ensures proper distribution to all participants, maintaining security while enabling reliable in-band key transmission without requiring direct peer-to-peer key sharing.
2Adaptability or versatility
If out-of-band communication is used for key updates, then key distribution can be achieved, but the system complexity increases due to managing separate communication channels
Solution Approach 1:
The patent makes the communication channel universal by using it for both media transmission and key exchange purposes. The same communication infrastructure handles both types of data, eliminating the need to maintain separate out-of-band channels. This multi-functional approach reduces system complexity while preserving the flexibility to update keys dynamically during the session.
3Reliability
If encryption keys are updated during a call using out-of-band techniques, then security can be maintained, but participants may not receive the updated key, compromising security
Solution Approach 1:
The patent implements feedback mechanisms where participants acknowledge receipt of updated encryption keys. The session manager tracks key distribution status and can detect when a participant has not received or acknowledged a key update, allowing for retransmission or alternative delivery methods to ensure all participants receive the necessary keys for maintaining security.
Data Source
AI summary
The present application describes a method, system, and non-transitory computer-readable medium for end-to-end encryption during a secure communication session. According to the present disclosure, a first device initializes a secure communication session with at least one second device. Initializing the secure communication session includes transmitting an invitation to a secure communication session to the at least one second device. The first device subsequently receives the token from the at least one second device and validates the token. When the token is invalid, the first devices terminates the secure communication session. However, when the token is valid, the first device performs a three-way handshake with the at least one second device to negotiate a first encryption key and a second encryption key. The first encryption key is used to encrypt communication data transmitted by the first device and the second encryption key is used to decrypt communication data received from the at least one second device.