Multi-Channel Key Distribution for Real-Time SSL Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for secure communication, such as SSL, are not effective for real-time processing of inter-Internet traffic, which is necessary for secure authentication across multiple information centers, as they are static and do not allow for real-time transmissions.
Innovation Solution
A method and apparatus that utilize a common directory server to generate and manage public-private key pairs for directory servers, enabling secure and authenticated communication across multiple information centers through SSLX-EA (Embedded Authentication) methods, ensuring real-time trust and security in public networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SSL (Secure Sockets Layer) is used for secure communication, then authentication and security are provided, but real-time processing is not enabled due to static nature
Solution Approach 1:
The patent transforms the static SSL authentication process into a dynamic real-time system by implementing continuous key generation and distribution through multiple communication channels. The system dynamically updates authentication credentials during active communication sessions, enabling both security and real-time processing.
Solution Approach 2:
The patent performs preliminary key generation and distribution through out-of-band channels before actual communication occurs. This pre-establishment of secure credentials allows the main communication channel to operate in real-time without computational overhead, resolving the contradiction between security setup time and real-time processing.
2Reliability
If multiple out-of-band communication channels are used to send keys, then real-time trust is established, but system complexity increases
Solution Approach 1:
The patent introduces a key distribution server as an intermediary that manages the complex task of generating and distributing authentication keys across multiple channels. This centralizes the complexity in a dedicated component rather than distributing it throughout the entire system, making the overall architecture more manageable.
Solution Approach 2:
The patent divides the key distribution process into separate independent channels (email, SMS, voice call, etc.), each handling specific portions of the authentication credentials. This segmentation allows each channel to be implemented and managed independently, reducing overall system complexity while maintaining real-time trust.
3Reliability
If SSLX-EA methods are implemented for inter-Internet traffic, then secure communication is enabled, but performance degradation occurs compared to standard SSL
Solution Approach 1:
The patent performs all computationally intensive key generation and wrapping operations in advance through out-of-band channels before the actual communication session begins. This preliminary action moves the performance burden away from the real-time communication path, allowing SSLX-EA to provide enhanced security without degrading operational performance.
Data Source
AI summary
A method for obtaining an encryption/authentication key uses multiple return channels over which to send parts of the key, which parts are then combined to form the actual key. A method includes receiving an open request for a first key which is a trusted key wrapped in a public key. The open request includes an authentication request value that identifies the open request as a verified setup directory service, the public key, an email address and a specified out-of-band channel. The server sends a first reply sent directly back with a first half of the first key offset by a unique value and wrapped using the public key. The second reply is sent via email which includes a second half of the first key offset by the first half of the first key. The third reply is sent over the out-of-band channel, which includes the unique value.