Secure Mesh Network Instant Messaging via Symmetric Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In mesh networks, instant messages are often transmitted through central servers, compromising privacy and integrity, and consuming user and network resources, as they are not encrypted and may be routed through unsecured channels.
Innovation Solution
Implementing a method where user devices in a mesh network determine and encrypt instant messages using symmetric keys negotiated between them, allowing secure transmission over existing meshnet connections without relying on additional IM applications or central servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If instant messages are transmitted through central servers in mesh networks, then message delivery is simplified, but privacy and message integrity are compromised
Solution Approach 1:
The patent introduces symmetric keys as intermediaries that enable secure direct communication between endpoints. These keys act as mediators that allow messages to be encrypted and decrypted without requiring untrusted central servers, thus maintaining privacy and integrity while simplifying the communication path.
Solution Approach 2:
The patent extracts the encryption functionality from central servers and places it directly at the endpoints through symmetric key implementation. This removes the need for untrusted intermediaries to handle message content, keeping only essential routing functions at servers while maintaining security at endpoints.
2Device complexity
If instant messages are transmitted through central servers, then routing is simplified, but user and network resources are consumed
Solution Approach 1:
The patent segments the communication function into two parts: endpoints handle encryption and decryption using symmetric keys, while servers handle only lightweight routing. This segmentation reduces server resource consumption and eliminates redundant processing, optimizing overall network efficiency.
Solution Approach 2:
Endpoints perform self-service encryption and decryption of messages using their own symmetric keys, eliminating the need for servers to process message content. This self-service approach conserves server resources and reduces network bandwidth consumption by encrypting messages before transmission.
3Reliability
If dedicated IM applications are used in mesh networks, then secure communication is achieved, but device resources are consumed
Solution Approach 1:
The patent implements symmetric key encryption as a universal mechanism that can be integrated into any existing mesh network communication protocol. This multi-functional approach allows secure communication without requiring dedicated IM applications, as the encryption layer works with any message type and protocol, reducing device resource consumption.
Solution Approach 2:
The patent merges the encryption functionality directly into the mesh network communication stack, combining security with existing communication protocols. This integration eliminates the need for separate dedicated IM applications, reducing device overhead while maintaining security through symmetric key implementation.
Data Source
AI summary
A method including determining, by a first device in communication with a second device and a third device in a mesh network, a first instant message to be transmitted to the second device and a second instant message to be transmitted to the third device, the first instant message and the second instant message including instant messaging (IM) information; encrypting, by the first device, the first instant message based at least in part on utilizing a symmetric key negotiated between the first device and the second device and the second instant message based at least in part on utilizing a symmetric key negotiated between the first device and the third device; and selectively transmitting, by the first device, the encrypted first instant message over a first meshnet connection and the encrypted second instant message over a second meshnet connection. Various other aspects are contemplated.