Message Server Encryption Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing messenger services face security issues as messages are decrypted by servers, making them vulnerable to hacking and unauthorized access, even with end-to-end encryption, which requires individual management of messages between users.
Innovation Solution
Implementing a system where user terminals generate and manage encryption keys for messages, allowing them to be encrypted and decrypted without involving the message server, using hash values or asymmetric keys to secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the server decrypts messages, then message delivery is simplified, but security and user privacy are compromised
Solution Approach 1:
The decryption function is extracted from the server and transferred to the user terminals. Only encrypted messages and decryption instructions are transmitted through the server, while the actual decryption operation is performed locally on user terminals, removing the security vulnerability of server-side decryption.
Solution Approach 2:
The server acts as a pure intermediary that only transmits encrypted data without accessing or decrypting it. The server facilitates message delivery by routing encrypted messages between terminals while maintaining security through end-to-end encryption, separating the delivery function from the decryption function.
2Reliability
If end-to-end encryption is applied, then security is improved, but device complexity increases due to individual message management
Solution Approach 1:
Multiple encrypted messages destined for the same user terminal are merged into a single transmission package. The server consolidates messages from different senders or different time points, reducing the number of individual management operations required at the terminal while maintaining end-to-end encryption for each message.
Solution Approach 2:
The user terminal implements a universal decryption mechanism that can handle multiple encrypted messages using a single decryption key or key pair. This multi-functional capability allows the terminal to decrypt various messages without requiring separate management procedures for each individual message, reducing operational complexity.
Data Source
AI summary
One or more example embodiments include user terminals, methods, and/or computer-readable recording mediums storing computer programs, in which information encrypted or decrypted not to be decoded by a message server that controls transmission and reception of messages between one or more user terminals is not shared with the message server. One or more example embodiments include user terminals, methods, and/or computer-readable recording mediums storing computer programs, which encrypt a first message by using an encryption key, transmit the first message from a first user terminal to a second user terminal, and decrypt a second message received from the second user terminal by using the encryption key.