Key Generation Using Third-Party Providers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption schemes, especially those based on computational assumptions, are vulnerable to future advances in technology, including quantum computing, which can break existing encryption methods, posing a long-term security risk for data communication systems.
Innovation Solution
A method and system for key generation that uses third-party providers to create a common key between user devices without direct communication, employing private tables and XOR operations, enabling secure communication using one-time-pad encryption and authentication, while minimizing reliance on computational assumptions and avoiding single points of failure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If computational-based encryption schemes (e.g., AES) are used, then encryption can be implemented with current hardware, but security becomes vulnerable to future quantum computing advances
Solution Approach 1:
The patent replaces computational-based encryption mechanisms with information-theoretic security mechanisms. Instead of relying on mathematical problems that quantum computers might solve, the system uses one-time-pad encryption combined with information-theoretic key distribution, making security independent of computational power and thus immune to quantum computer threats.
Solution Approach 2:
The patent changes the fundamental parameter of security from computational complexity to information-theoretic security. By using truly random one-time pads and information-theoretic key distribution protocols, the system achieves security that does not degrade with advances in computing technology, including quantum computing.
2Productivity
If direct communication is used for key generation between user devices, then key exchange can be performed efficiently, but single points of failure and lack of trust remain
Solution Approach 1:
The patent introduces third-party providers as intermediaries in the key generation process. These trusted intermediaries facilitate key exchange between user devices without requiring direct communication that creates single points of failure. The third parties enable key distribution while maintaining trust through their role as neutral facilitators.
Solution Approach 2:
The patent segments the key generation system into multiple independent components: user devices, third-party providers, and communication channels. This segmentation eliminates single points of failure by distributing trust and functionality across multiple entities, making the system more reliable while maintaining efficiency.
3Reliability
If multiple third-party providers are used for key generation, then security and scalability improve, but system complexity increases
Solution Approach 1:
The patent designs third-party providers with multi-functionality, enabling them to serve multiple users and facilitate multiple key generation operations. This universal design allows the system to scale by adding more providers without proportionally increasing complexity, as each provider operates using the same standardized protocols and interfaces.
Solution Approach 2:
The patent changes the scaling parameter from linear increase in complexity to logarithmic or constant complexity. By using information-theoretic security and efficient key distribution protocols, adding more third-party providers increases security linearly while keeping the operational complexity manageable through standardized procedures and data structures.
4Reliability
If one-time-pad encryption is used, then information-theoretic security is achieved, but key management complexity increases
Solution Approach 1:
The patent uses third-party providers as intermediaries to manage the one-time-pad keys. These providers handle the complex tasks of key generation, distribution, and synchronization between users, eliminating the need for users to directly manage the complexity of one-time-pad key logistics while maintaining information-theoretic security.
Solution Approach 2:
The system enables self-service key management where third-party providers automatically handle key distribution and synchronization without requiring manual intervention from users. This self-service approach maintains the security benefits of one-time-pad encryption while significantly reducing the operational complexity of key management.
Data Source
AI summary
Systems and methods for key generation between a first user computing device and a second user computing device without requiring direct communication during key generation. The method using a plurality of third-party providers and a first private table and a second private table. The method including: performing by the second user computing device: receiving indexes each associated with a value in the second private table, each index received from the respective third-party provider sharing those values, each index associated with a value that matches an indexed value in the first private table received by the respective third-party provider from the first user computing device; and generating a common key by combining the indexed values of the second private table.