Selective Message Part Encryption via Unique Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure message communication protocols, such as S/MIME, compromise the security of message data when a single session key is used to encrypt multiple parts of a message, as revealing the session key to decrypt a selected part can compromise other encrypted parts.
Innovation Solution
The method involves using different encryption keys for each message part and providing key identifiers within the message to associate each part with its respective encryption key, while storing the encryption keys in a separate part to maintain security across message parts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single session key is used to encrypt multiple message parts, then the ease of operation is improved, but the security of the message data is compromised when selective decryption is required
Solution Approach 1:
The patent divides the encryption keys into separate segments - each message part is encrypted with its own unique key rather than a single shared session key. This segmentation allows selective decryption of individual parts without exposing other parts, resolving the contradiction between ease of operation and security reliability.
Solution Approach 2:
The patent introduces key identifiers as intermediaries that map to encryption keys stored in a separate message part. This intermediary mechanism enables the system to maintain security while allowing selective decryption, as the key identifiers provide a secure reference system without compromising the encryption integrity.
2Reliability
If different encryption keys are used for each message part, then the security of message data is improved, but the device complexity increases
Solution Approach 1:
The patent merges the key identifiers with the message parts structure, combining the encryption metadata with the message content in a unified format. This merging approach simplifies key management by integrating key references into the existing message structure rather than requiring separate complex key storage and retrieval mechanisms.
Solution Approach 2:
The patent makes the message part structure universal by using key identifiers that can reference keys for different message parts through a unified indexing system. This multi-functional approach allows the same structural framework to handle multiple encryption scenarios without increasing complexity, as the key identifier system serves multiple purposes: identification, localization, and security management.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A system and method for processing messages with encryptable message parts. When constructing an encoded message, an encryption key of a plurality of identified encryption keys is used to encrypt message data of a message part. A key identifier is associated with the message part and identifies the encryption key used for the encryption of the message data of the message part. In at least one exemplary embodiment, encryption keys that are used to encrypt message data of message parts are provided in a separate message part, arranged by key identifier. In particular, the encryption keys, arranged by key identifier, may be provided in exactly one message part separate from the message parts containing message data. This allows for a compact message encoding.