Multi-device End-to-end Encryption via Group Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
End-to-end encryption technologies are limited in scenarios with multiple recipient devices sharing the same mobile device number, as only the device with the private key can decrypt messages, preventing other devices from accessing encrypted communications.
Innovation Solution
Implementing a system that leverages IP Multimedia Subsystem (IMS) components like CSCF, presence servers, and RCS servers to facilitate secure key sharing and validation between devices, allowing multiple devices to decrypt encrypted messages using shared private keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If end-to-end encryption is implemented with a single private key per device, then message privacy is protected, but multiple devices sharing the same mobile device number cannot access encrypted messages
Solution Approach 1:
The patent segments the single private key into multiple device-specific private keys while maintaining a shared group private key. Each device has its own private key for individual encryption, but all devices share a common group private key that enables them to all decrypt messages encrypted with the group public key. This segmentation allows multiple devices to access messages while maintaining individual privacy controls.
Solution Approach 2:
The patent merges multiple individual private keys with a shared group private key to create a hybrid key system. The group public key is derived from combining the individual public keys of all devices in the group. This merging enables any device in the group to access messages encrypted with the group public key, while individual devices can also encrypt messages intended only for themselves using their individual private keys.
2Adaptability or versatility
If multiple devices share the same mobile device number, then device consolidation is achieved, but encryption security is compromised because only one device can decrypt messages
Solution Approach 1:
The shared group private key provides universal access capability to all devices in the group. Any device can use the group private key to decrypt messages encrypted with the group public key, making the encryption system universally accessible to all consolidated devices while maintaining security through the requirement of shared cryptographic credentials.
3Adaptability or versatility
If a communication system supports multiple recipient devices with the same mobile device number, then communication coverage is expanded, but key management complexity increases
Solution Approach 1:
The patent introduces a communication server as an intermediary that manages the key distribution and validation process. The server stores the group private key and individual device public keys, and facilitates the encryption and decryption processes. This intermediary handles the complex key management operations, reducing the burden on individual devices while expanding communication coverage to multiple devices.
Data Source
AI summary
One or more computing devices, systems, and/or methods for end-to-end encryption for multiple recipient devices are provided. A first registration, comprising a first device public key, is created for a first device. A second registration, comprising a second device public key, is created for a second device. A first notify message of the second registration and second device public key is provided to the first device. A second notify message is provided to the second device of the first registration and first device public key. A secure communication invite is routed to the first device. An encrypted message, comprising a first device private key, is routed from the first device to the second device. End-to-end encrypted communication between a sender device and the first device and the second device using the first device private key is facilitated.