Optical Barcode Public-Key Exchange for End-to-End Message Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing messaging applications do not adequately protect the privacy of user communications, allowing eavesdroppers to access messages intended for end-to-end encryption.
Innovation Solution
Implementing custom optical barcodes with unique functional patterns, such as branded logos, to facilitate secure end-to-end encryption by exchanging public keys between communication partners, ensuring only intended recipients can decode and read messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If messages are transmitted over a network through servers, then communication functionality is enabled, but message privacy is compromised allowing eavesdroppers to access communications
Solution Approach 1:
The encryption key is divided into two separate parts: a public key and a private key. The public key is exchanged through the messaging server, while the private key remains securely stored on the user's device. This segmentation allows the system to maintain communication functionality through the server while protecting message privacy by ensuring that only the intended recipient can decrypt and read the messages.
2Object-affected harmful factors
If end-to-end encryption is implemented with public key exchange, then message privacy is protected, but the system complexity increases
Solution Approach 1:
The messaging server acts as an intermediary that facilitates the exchange of public keys between users without having the ability to decrypt the messages. The server transmits encryption data between devices but cannot access the private keys needed to read the communications. This intermediary approach protects message privacy while keeping the encryption system manageable by separating the key exchange function from the message storage function.
3Device complexity
If encryption keys are stored on messaging service servers, then key management is simplified, but security is weakened allowing server compromises to expose messages
Solution Approach 1:
The private encryption key is extracted from the server environment and stored exclusively on the user's local device. Only the public key remains on the server, which is useless for decrypting messages without the corresponding private key. This extraction ensures that even if the server is compromised, attackers cannot access the private keys needed to read encrypted communications, thereby maintaining security while keeping key management feasible through automated local storage.
Data Source
AI summary
Systems and methods for end to end encryption are provided. In example embodiments, a computer accesses an image including a geometric shape. The computer determines that the accessed image includes a candidate shape inside the geometric shape. The computer determines, using the candidate shape, an orientation of the geometric shape. The computer determines a public key of a communication partner device by decoding, based on the determined orientation, data encoded within the geometric shape. The computer receives a message. The computer verifies, based on the public key of the communication partner device, whether the message is from the communication partner device. The computer provides an output including the message and an indication of the communication partner device if the message is verified to be from the communication partner device. The computer provides an output indicating an error if the message is not verified to be from the communication partner device.