Authenticated Message Modification via Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional secure communication protocols, such as SSL, IPSEC, and SSH, are inflexible and insecure in distributed networks, particularly when intermediaries need to modify messages, as they reject minor changes and allow impersonation, limiting their use in cloud computing and other applications.
Innovation Solution
A method and system that divide messages into non-modifiable and modifiable parts, allowing only authorized parties to modify the latter while maintaining security integrity by using sanitizing keys and chameleon hash functions, ensuring that modifications do not compromise message authenticity or encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional secure communication protocols (SSL, IPSEC, SSH) are used to ensure message integrity and confidentiality, then message security is improved, but application flexibility deteriorates because intermediaries cannot modify messages
Solution Approach 1:
The message is divided into modifiable parts and non-modifiable parts. The modifiable parts can be altered by intermediaries while the non-modifiable parts maintain security integrity. This segmentation allows intermediaries to perform necessary modifications (improving flexibility) without compromising the security of critical message components.
Solution Approach 2:
Different parts of the message are assigned different security properties. The non-modifiable parts maintain strict security requirements while the modifiable parts have relaxed security constraints. This local differentiation enables intermediaries to modify specific portions of the message without affecting the overall security guarantees of the communication protocol.
2Adaptability or versatility
If service providers disseminate secret key material to intermediates to enable message modification, then application flexibility is improved, but security deteriorates because intermediates may impersonate the service provider
Solution Approach 1:
The secret key material is segmented into a signing key and a verification key. The signing key is kept secure by the service provider while the verification key is distributed to intermediaries. This allows intermediaries to verify and modify messages (improving flexibility) without having access to the private signing key that would enable impersonation (maintaining security).
Solution Approach 2:
A cryptographic verification mechanism acts as an intermediary between the service provider and the message modification process. Intermediaries use the verification key to validate messages and perform authorized modifications, rather than having direct access to secret key material. This mediator mechanism enables flexibility while preventing impersonation attacks.
3Reliability
If conventional protocols reject any modified messages to maintain security, then message authenticity is improved, but application functionality deteriorates because legitimate modifications are blocked
Solution Approach 1:
The message is segmented into modifiable and non-modifiable parts with different authentication requirements. The receiving party verifies the non-modifiable parts to ensure authenticity while allowing the modifiable parts to be altered by authorized intermediaries. This selective verification maintains message authenticity for critical components while enabling legitimate modifications for application functionality.
Solution Approach 2:
Different authentication strictness is applied to different parts of the message. The non-modifiable parts undergo strict authentication verification while the modifiable parts have relaxed verification rules. This local quality approach allows the system to maintain high security for critical message elements while permitting necessary modifications in other areas.
Data Source
AI summary
A method and system for modifying an authenticated and/or encrypted message by a modifying party exchanged between a sending party and a receiving party based on a secure communication protocol, the method includes the steps ofa) dividing a clear message into non-modifiable parts and modifiable parts by the sending party;b) including modifiable part information into the message by the sending party;c) authenticating and/or encrypting the message by the sending party;d) providing en- and decryptability and/or authenticability of the message to the modifying party in such a way that the modifying party can only modify the modifiable parts of the message;e) modifying one or more modifiable parts by the modifying party; andf) providing an authenticated and/or encrypted modified message according to the secure communication protocol to the receiving party.