Modular Secure Data Transfer System

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing secure communication channels are vulnerable to decryption by third parties using brute force calculations, and they suffer from inefficiencies due to redundant definition data in message transmission, leading to increased overhead.

Innovation Solution

A modular secure data transfer system that separates message data from definition/data type information, generates unique keys for each message definition, and transmits these components separately over a secure channel using encryption, ensuring that even if encryption is broken, the message data remains uninterpretable without the definition data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional encryption is used to secure communication channels, then message confidentiality is protected, but the system becomes vulnerable to brute force decryption attacks

Engineering Contradiction:
Improvemessage confidentialityVSAvoidbrute force decryption vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The message is divided into multiple segments or shares, where each segment alone is insufficient to reconstruct the original message. The message can only be recovered when a sufficient number of segments are combined, making brute force attacks on individual segments ineffective.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A secret sharing mechanism acts as an intermediary between the sender and receiver, introducing an additional layer of protection. The message is transformed into multiple shares through a mathematical function, and these shares are distributed such that no single share reveals information about the original message.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If definition data is transmitted with each message to define semantics, then message interpretation accuracy is ensured, but communication overhead increases due to redundant data transmission

Engineering Contradiction:
Improvemessage interpretation accuracyVSAvoidcommunication overhead
Core Design Contradiction:
Measurement precisionVSLoss of energy

Solution Approach 1:

Multiple messages that share the same definition data are combined and transmitted together. The definition data is transmitted once for a group of messages rather than with each individual message, reducing redundancy while ensuring that all messages in the group can be correctly interpreted.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

Definition data is transmitted in advance before the actual message data. This preliminary transmission allows the receiving system to have the semantic definitions ready and available when the messages arrive, eliminating the need to retransmit definition data with each message.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8997207B2Modular secure data transfer
Publication Date: 2015.03.31 SAP SE
  • US8997207B2 patent drawing
  • US8997207B2 patent drawing
  • US8997207B2 patent drawing

AI summary

A method and system that modularizes a message by separating the message definition data from the message data. The message definition data and message data are transmitted over a secure channel to a target computing device. The message definition data and message data are recombined to form the original message at the target computer using a process corresponding to the modularization process. A key is used to track the associated definitions and message data and determine the corresponding combination process. Separate transmission of the data definitions and message data provides an added level of security. If message data is intercepted and decrypted by a third party, then the data is not easily utilized, because the definition data is absent. Similarly, interception of the message definition is not useful without the message data.