Message-Level Encryption Across Unsecure API Service Zones
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Financial institutions face challenges in securing message transmission within their systems due to the 'onion security model' where messages are decrypted and re-encrypted at each layer, allowing operations personnel to view unencrypted messages, and most have not transitioned to secure data centers, leading to potential data exposure.
Innovation Solution
Implementing message-level encryption using dedicated processors to encrypt and decrypt messages through unsecure zones within both the requesting and responding parties' computer systems, employing session keys and public/private key pairs stored in Hardware Security Modules (HSMs) to maintain message integrity and confidentiality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If message-level encryption is implemented to prevent unauthorized access to messages in unsecure zones, then message confidentiality is improved, but device complexity increases due to the need for dedicated processors and multiple encryption layers
Solution Approach 1:
The patent divides the encryption system into multiple independent layers: message-level encryption using session keys, transport-level encryption using public/private key pairs, and HSM-based key management. Each layer operates independently with dedicated processors, allowing the system to maintain strong security while enabling modular implementation and management of complexity.
2Reliability
If multiple layers of encryption are applied to messages, then message security is improved, but processing time increases due to repeated encryption and decryption operations
Solution Approach 1:
The patent performs preliminary generation and distribution of session keys before message transmission. The requesting party generates a session key, encrypts it with the responding party's public key, and includes it in the request. The responding party already has the session key ready upon receipt, eliminating the need for time-consuming key exchange during message processing. This preliminary key establishment enables fast symmetric decryption of messages without repeated public key operations.
3Ease of operation
If operations personnel are given physical and login access to servers for operational purposes, then ease of operation is improved, but security deteriorates as personnel can view unencrypted messages
Solution Approach 1:
The patent applies different encryption qualities to different parts of the system. Message-level encryption with session keys provides strong protection for sensitive message contents in unsecure zones where operations personnel have access. Transport-level encryption provides adequate protection for metadata and routing information. This differentiated approach maintains operational accessibility while protecting the most sensitive information at the message level where personnel exposure is highest.
Data Source
AI summary
Disclosed are requesting party and responding party computer systems which perform a message level encryption for messages sent through the computer systems. Using the message level encryption, the computer systems may prevent those with access to an unsecured zone in one or more of the computer systems from viewing the messages.