Key Switch Hints for Secure VoIP Signal Merging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed communication systems, especially VoIP teleconferencing, maintaining privacy is challenging due to the need to share encryption keys with an untrustworthy central data mixer, which can compromise security.
Innovation Solution
A system and method that generates key switch hints using a trusted third party's private key and client terminals' secret keys, allowing encrypted data streams to be merged without sharing private keys, using additive homomorphic encryption to enable secure communication by delegating decryption capability between clients and the third party.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption keys are shared with the central data mixer to enable encrypted communication, then communication security is improved, but the risk of key compromise increases due to the untrustworthy nature of the central hub
Solution Approach 1:
A trusted third party is introduced as an intermediary to generate key switch hints that enable the central mixer to switch encryption keys without actually possessing the private keys. The trusted third party acts as a mediator between clients and the untrustworthy central hub, allowing secure communication while eliminating the need for clients to share sensitive key material with the central mixer.
Solution Approach 2:
The encryption key management is segmented into multiple components: client private keys remain with clients, the trusted third party holds the ability to generate key switch hints, and the central mixer only receives encrypted data and key switch hints. This segmentation ensures that no single untrustworthy entity has access to all key material needed to compromise security.
2Reliability
If a trusted third party is introduced to generate key switch hints, then key security is improved, but system complexity increases due to additional trusted entities
Solution Approach 1:
The trusted third party serves multiple functions: it generates key switch hints for key switching, establishes initial key pairs with clients, and manages the security infrastructure. By consolidating these security-related functions into a single multi-functional entity, the system avoids the need for multiple separate trusted entities, thereby reducing overall system complexity while maintaining high key security.
Data Source
AI summary
In a computer implemented method for data privacy in a distributed communication system, the method includes: storing a plurality of secret keys, each secret key for a respective one of a plurality of client terminals; identifying a mixer key; generating a plurality of key switch hints for the client terminals, each of the key switch hints generated for a respective client terminal of the client terminals, using the mixer key and a respective secret key for each respective client terminal; sending the key switch hints to a mixer; switching a first encrypted data stream received from a first client terminal of the client terminals to an encrypted output data stream using the key switch hints; and sending the encrypted output data stream to a receiving client terminal of the client terminals to be decrypted by the receiving client terminal.