Decentralized Mesh Network Instant Messaging Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems rely on central servers for end-to-end encryption, which can be inefficient and compromise user privacy, especially when users are offline or engaging in decentralized communication.
Innovation Solution
A decentralized distributed mesh network using asymmetric cryptography and deniable encryption methodologies allows for non-interactive message exchange sessions, enabling end-to-end encryption without a central server, using ephemeral keys and forward secrecy to ensure secure communication between clients.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized server is used for end-to-end encryption, then message security can be maintained, but user privacy is compromised and system efficiency decreases when users are offline
Solution Approach 1:
The patent extracts the central server from the encryption process, allowing end-to-end encryption to occur directly between client devices. The server is removed from the trusted party role, and encryption/decryption operations are performed locally on user devices, eliminating the privacy compromise while maintaining security.
Solution Approach 2:
The system enables clients to perform encryption and decryption operations independently without requiring a central server. Each client generates and manages its own cryptographic keys, and messages are encrypted/decrypted locally, allowing the system to serve itself without a trusted intermediary.
2Reliability
If a centralized server is used for message routing, then message delivery can be ensured, but system efficiency decreases and user privacy is compromised
Solution Approach 1:
The patent segments the centralized routing function into distributed routing across multiple peer nodes in a mesh network. Each node independently routes messages to other nodes, eliminating the single-point bottleneck and improving system efficiency while maintaining reliable message delivery through distributed redundancy.
3Reliability
If interactive communication protocols are used for end-to-end encryption, then security can be maintained, but communication flexibility is reduced when users are offline
Solution Approach 1:
The patent implements preliminary action by pre-generating and storing encryption keys, message queues, and session state data locally on client devices before online communication is needed. When users go offline, these pre-prepared resources enable continued message receipt and sending without requiring real-time interactive protocols, thus maintaining security while improving flexibility.
Data Source
AI summary
The exemplary inventive instant messaging system may include a sending client that accesses encryption data associated with a receiving client on a distributed mesh network where the encryption data is signed by a receiver public key of the receiving client, forms a non-interactive message exchange session on the distributed mesh network, generates a first session key based on the encryption data and a sender secret key, encrypts a message using the first session key, encrypts session information using the receiver public key, produces a session state including the encrypted message and the encrypted session information and stores the session state in the non-interactive message exchange session. The receiving client accesses the session state, decrypts the encrypted session information with a receiver secret key, generates a second session key using the session information and a sender public key, and decrypts the message using the second session key.