Communication Metadata Privacy via Pseudo-Random Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems fail to effectively prevent user tracking due to the persistence of identifiable metadata, even when using techniques like pseudonyms and protected tunnels, as sequence numbers and public keys can reveal user information, and existing methods to address these issues are either inefficient or computationally expensive.
Innovation Solution
A method using pseudo-random sequences to represent long-lived or predictably changing values in communication metadata, where parties agree on a shared key to map original metadata to pseudo-random values, allowing the receiving party to retrieve the original values, thus concealing true identifiers from third parties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If pseudonyms and protected tunnels are used to hide identifiers, then user identity privacy is improved, but metadata such as sequence numbers and public keys still reveal user tracking information
Solution Approach 1:
The patent extracts and removes tracking-capable metadata (sequence numbers, public keys, SPIs) from the communication stream, replacing them with pseudo-random values that cannot be used for tracking, while preserving the essential functional metadata needed for communication
Solution Approach 2:
The patent introduces pseudo-random values as intermediary elements that replace original metadata, acting as a mediator that preserves communication functionality while eliminating tracking capability
2Loss of information
If frequently changing identifiers are used to prevent tracking, then privacy is improved, but computational overhead and signaling complexity increase
Solution Approach 1:
The patent combines multiple privacy protection mechanisms into a single pseudo-random value generation process, eliminating the need for separate pseudonym exchange protocols and reducing signaling overhead
Solution Approach 2:
The patent enables each party to autonomously generate pseudo-random values using shared secrets, eliminating the need for centralized pseudonym distribution infrastructure
3Reliability
If public keys are used for authentication, then security is improved, but the public key itself serves as a traceable identifier
Solution Approach 1:
The patent extracts the traceable identifier function from the public key while retaining the authentication function, using pseudo-random values that cannot be traced back to users
Solution Approach 2:
The patent changes the parameter used for identification from stable public keys to dynamically generated pseudo-random values, maintaining authentication security while eliminating traceability
4Reliability
If sequence numbers are used for reliable delivery, then communication reliability is improved, but sequence numbers can be used to track user movement and behavior
Solution Approach 1:
The patent extracts the tracking capability from sequence numbers by replacing them with pseudo-random values, while preserving the sequence functionality needed for reliable delivery through window-based acknowledgment mechanisms
Data Source
AI summary
A method of improving privacy by hiding, in an ordered sequence of messages M[x(1), D(1)], M[x(2), D(2)], etc, communicated between a first and at least one second party sharing a key k, metadata x(i) descriptive of message processing, wherein D(i) denotes payload data. The method comprises the first and the second party agreeing on a pseudo random mapping depending on a shared key k, Fk, mapping at least x(i) to y(i), and the first party modifying the messages by replacing x(i) by y(i) in each message M(x(i), D(i)). The first party then transmits the modified messages maintaining their original order, and on reception of a message M(y(m), D), the second party uses a mapping Gk to retrieve position m of received value and the original value x(m).