Partner Token Encryption With Time-Limited Key Exchange

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional data encryption methods using a single cryptographic key are vulnerable to malicious actors, as sharing the key compromises security and reliability in data exchange.

Innovation Solution

Implementing two password asymmetric encryption techniques using time-constrained partner tokens, where each token includes embedded and encrypted public key data, allowing secure encryption and decryption without sharing private key data, and limiting the time frame for these operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a single cryptographic key is shared for encryption and decryption, then data exchange is simplified, but security is compromised as the key becomes vulnerable to malicious actors

Engineering Contradiction:

Improvedata exchange simplicityVSAvoidcryptographic key security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The cryptographic system is segmented into two separate keys: a public key for encryption and a private key for decryption. This segmentation eliminates the need to share a single secret key, as the public key can be freely distributed while the private key remains secure on the recipient's device.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent implements asymmetric cryptography where the encryption key (public key) and decryption key (private key) are mathematically related but not identical. The public key can be shared openly while the private key remains confidential, creating an asymmetric key management system that resolves the security-simplicity contradiction.

Inventive Principle:

Principle #4Asymmetry

2Reliability

If cryptographic keys are protected through additional security measures, then security is improved, but the complexity of the system increases

Engineering Contradiction:

Improvecryptographic key protectionVSAvoidsecurity measure complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Each party generates their own key pair independently using their own password through the key derivation function. The system is self-service in that no trusted third party is needed to distribute or manage keys - each user autonomously generates their public and private keys, eliminating complex key distribution infrastructure.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent transforms a password (low-entropy input) into a cryptographic key pair (high-entropy output) through a key derivation function. This parameter transformation allows users to remember simple passwords while the system handles the complexity of generating and managing strong cryptographic keys automatically.

Inventive Principle:

Principle #35Parameter changes

3Ease of operation

If private key data is exchanged for decryption, then decryption capability is enabled, but the risk of compromise by malicious actors increases

Engineering Contradiction:

Improvedecryption capabilityVSAvoidmalicious actor compromise risk

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the private key from the exchange process entirely. Instead of exchanging private keys or secret data, only public keys are shared. The private key remains exclusively on the recipient's device and is never transmitted, eliminating the security risk of private key exposure while maintaining decryption capability.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The public key acts as an intermediary that enables secure communication without exposing the private key. The public key mediates the exchange by allowing the sender to encrypt data that only the holder of the corresponding private key can decrypt, without the private key itself needing to be shared.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Adaptability or versatility

If unlimited time is allowed for encryption and decryption operations, then operational flexibility is maintained, but the window for potential security breaches increases

Engineering Contradiction:

Improveoperational time flexibilityVSAvoidsecurity time window

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent incorporates time constraints into the partner token before it is issued. The expiration timestamp is predetermined and embedded in the token, limiting the window during which the token can be used for decryption. This preliminary action restricts the time window for potential security breaches while maintaining operational flexibility within the allowed period.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12603764B2Data protection with two password asymmetric encryption

Publication Date: 2026.04.14 CAPITAL ONE SERVICES LLC

AI summary

Techniques for protecting data using two password asymmetric encryption based on time-constrained password-based partner tokens. To encrypt data, a first partner computing device receives a first partner token from a second computing device. The first partner computing device decrypts the first partner token to recover first public key data generated by the second partner computing device. The first partner computing device derives a cryptographic encryption key to encrypt the data based on the first public key data, and based on first private key data generated by the first partner computing device. The second computing device may decrypt the encrypted data based on a second partner token generated by the first partner computing device, using a cryptographic decryption key derived using second private key data generated by the second computing device and second public key data generated by the first computing device and embedded and encrypted in the second partner token.