Server-Mediated Secure Messaging With Per-Request Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems require software installation on both sender and recipient devices for point-to-point encryption, complicating the process and limiting scalability, especially in scenarios where the recipient is unknown.
Innovation Solution
A method and system that creates a new communication key for each message exchange, using RSA keys and symmetric encryption to securely transmit messages without requiring software installation on the sender's or recipient's devices, ensuring secure and efficient communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If point-to-point encryption is implemented using traditional methods, then message confidentiality is improved, but device complexity and software installation requirements increase
Solution Approach 1:
The patent introduces a server as an intermediary that handles all encryption key generation, storage, and management. The server acts as a mediator between sender and recipient, performing RSA key pair generation, storing public keys, and facilitating secure message exchange without requiring encryption software on client devices. This transfers the computational complexity from endpoints to the central server, resolving the contradiction between confidentiality and device complexity.
Solution Approach 2:
The system enables self-service encryption where the server automatically generates RSA key pairs for users, stores their public keys, and manages the encryption/decryption process without requiring users to manually install or configure encryption software. The server serves itself by maintaining the cryptographic infrastructure, eliminating the need for complex client-side software installation while maintaining strong encryption.
2Reliability
If encryption software is installed on recipient devices, then secure message reception is improved, but ease of operation deteriorates
Solution Approach 1:
The server mediates the entire encryption process by generating key pairs, storing public keys, and handling the cryptographic operations. The recipient simply needs to register with the server and provide their public key, after which they can receive encrypted messages without installing any software. The server handles all complex cryptographic operations, making the process simple for end users while maintaining strong security.
Solution Approach 2:
The server provides multiple functions including key generation, key storage, message encryption, and message decryption through a single unified platform. This multi-functional approach eliminates the need for separate encryption software installations on each device, as the server handles all cryptographic operations universally for all users in the system.
3Reliability
If digital signatures and encryption keys are required for message decryption, then message integrity is improved, but device complexity and scalability worsen
Solution Approach 1:
The server acts as a central intermediary that manages all RSA key pairs and digital signatures. When a sender wants to encrypt a message, they obtain the recipient's public key from the server. The server verifies digital signatures and manages the exchange of cryptographic materials, ensuring message integrity without requiring recipients to have complex software. This centralized management enables easy scalability as new users can be added by simply registering with the server.
Solution Approach 2:
The system implements feedback mechanisms where the server provides public keys to senders, who then use them for encryption. The server also receives encrypted messages, verifies digital signatures, and distributes decrypted messages to recipients. This feedback loop ensures message integrity through cryptographic verification while maintaining scalability, as the server automatically manages the increasing number of key pairs and message exchanges as the system grows.
Data Source
AI summary
The present system and method allow the exchange of messages, such as email, between a sender and a recipient while maintaining the data secure and the integrity of the content of the messages. The method and system do not require a user having an account to open a received message. The method comprises the server creating a new communication key upon reception of a request. The communication key is typically valid for a single request to ensure that each request is encrypted using different communication keys. The method typically comprises a client [A] establishing communication on [HANDSHAKE] with one or more servers [B]. The HANDSHAKE generally aims at initializing the encryption key that will be used to exchange information between A and B.