Selective Message Part Encryption Using Distinct Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure message communication protocols, such as S/MIME, compromise the security of message parts when a single session key is used to encrypt multiple parts of a message, as revealing the session key to decrypt a selected part can compromise other encrypted parts.
Innovation Solution
Using different encryption keys for each message part and storing their corresponding key identifiers within the message, allowing selective decryption of parts without compromising the security of other parts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a single session key is used to encrypt multiple message parts, then the encryption process is simplified and more efficient, but the security of unselected message parts is compromised when the session key is revealed
Solution Approach 1:
The patent divides the message into separate message parts, each encrypted with a distinct encryption key. This segmentation allows selective decryption of specific parts without exposing keys for other parts, resolving the contradiction between encryption efficiency and message security by maintaining key isolation while enabling efficient selective access.
Solution Approach 2:
The patent applies different encryption keys to different message parts based on their specific security requirements and access needs. This local quality approach ensures that each message part has its own security characteristics, allowing the session key to be revealed for one part without compromising the security of other parts encrypted with different keys.
2Reliability
If different encryption keys are used for each message part, then the security of unselected message parts is maintained, but the complexity of the encryption process increases
Solution Approach 1:
The patent combines multiple encryption keys and their corresponding message parts into a single unified message structure. This merging approach manages the complexity of multiple keys by organizing them within one message framework, reducing the operational burden despite using different keys for each part.
Solution Approach 2:
The patent introduces key identifiers as intermediaries that link message parts to their corresponding encryption keys. These identifiers simplify the management of multiple keys by providing a straightforward mapping mechanism, reducing the complexity of tracking and managing distinct encryption keys for each message part.
3Ease of operation
If a session key is made available for decrypting a selected message part, then access to that part is enabled, but the security of other encrypted parts is compromised
Solution Approach 1:
The patent segments the message into independently encrypted parts, each with its own encryption key. This segmentation enables selective access to specific message parts by revealing only the corresponding session key, while other parts remain secure with their distinct keys, resolving the contradiction between ease of selective access and security of other parts.
Solution Approach 2:
The patent applies local quality by giving each message part its own specific encryption key and security characteristics. This allows the session key to be selectively revealed for one message part without affecting the security of other parts, as each part has its own localized security measures independent of others.
Data Source
AI summary
A system and method for processing messages with encryptable message parts. When constructing an encoded message, an encryption key of a plurality of identified encryption keys is used to encrypt message data of a message part. A key identifier is associated with the message part and identifies the encryption key used for the encryption of the message data of the message part. In at least one exemplary embodiment, encryption keys that are used to encrypt message data of message parts are provided in a separate message part, arranged by key identifier. In particular, the encryption keys, arranged by key identifier, may be provided in exactly one message part separate from the message parts containing message data. This allows for a compact message encoding.