Network Verification Unit Encryption Key Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in verifying digital signatures for data transmission between computer networks, leading to storage and latency issues, as they require storing all data until signature verification is complete, which can expose networks to attacks or information loss.
Innovation Solution
A verification unit that encrypts data before transmission and sends the encryption key only if the signature is verified, allowing data to be sent directly to the second network without storage needs on the first network, reducing latency and spreading storage requirements across the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in the first computer network until signature verification is complete, then security is maintained, but storage requirements increase and latency is introduced
Solution Approach 1:
The patent extracts the data from the first computer network's storage system by encrypting it and transmitting the encrypted form to the second computer network. Only the decryption key remains in the first network, which is much smaller than the actual data. This resolves the contradiction by maintaining security through encryption while dramatically reducing storage requirements in the first network.
Solution Approach 2:
The patent applies preliminary encryption to the data before transmission, so that the data is already secured when it leaves the first network. The decryption key is transmitted separately and only used if signature verification succeeds. This preliminary security measure allows the system to avoid storing large amounts of data while maintaining security guarantees.
2Reliability
If data is stored in the first computer network until signature verification is complete, then security is maintained, but transmission latency increases
Solution Approach 1:
By extracting the bulk data from the first network's storage and transmitting it in encrypted form to the second network, the patent eliminates the need to wait for verification before initiating transmission. The verification process operates on the much smaller decryption key, significantly reducing latency while maintaining security.
Solution Approach 2:
The data is preliminarily encrypted and transmitted before verification completes. The encryption key is transmitted separately and conditionally based on verification results. This allows the data transmission to proceed in parallel with verification, reducing overall latency while maintaining security through the conditional key transmission.
3Loss of time
If data is transmitted before signature verification, then latency is reduced, but security is compromised
Solution Approach 1:
The patent introduces encryption as an intermediary layer between the data and the transmission process. The data is encrypted before transmission, and the decryption key is transmitted conditionally after verification. This intermediary encryption mechanism allows early transmission while maintaining security, as the transmitted data remains unreadable without the key.
Solution Approach 2:
The patent changes the state of the data from plaintext to encrypted form before transmission. This parameter change (encryption) allows the data to be transmitted safely before verification completes, as the encrypted form does not expose sensitive information. The verification result then controls whether the decryption key is transmitted, completing the security guarantee.
4Ease of operation
If the decryption key is transmitted with the encrypted data, then convenience is improved, but security is compromised
Solution Approach 1:
The patent segments the transmission into two separate components: the encrypted data and the decryption key. The encrypted data is transmitted immediately, while the decryption key is transmitted separately and conditionally based on signature verification. This segmentation provides convenience for data transmission while maintaining security through conditional key release.
Solution Approach 2:
The patent uses signature verification as an intermediary process that determines whether the decryption key should be transmitted. The verification process acts as a gatekeeper, allowing the system to maintain convenience (by transmitting encrypted data immediately) while ensuring security (by conditionally transmitting the key only after successful verification).
Data Source
AI summary
A system may include at least one hardware processor implementing a verification unit configured to: receive a set of data from a first computer network; transmit an encrypted version of the set of data to a destination within a second computer network; receive a signature associated with the set of data from the first computer network; verify that the signature is indicative of the set of data being from a known source; and in response to verification of the signature, transmit a decryption key associated with the encrypted version of the set of data to the destination, wherein the destination is configured to decrypt the set of data with the decryption key.