Peripheral Interface Device Local Encryption Decryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional cryptography systems for peripheral user interface devices are insecure due to the complexity of firmware and software, and the inability to reliably audit and secure third-party hardware and software, leading to the need for more effective local encryption and decryption solutions.

Innovation Solution

Peripheral user interface devices are configured to locally encrypt and decrypt data independently from host systems, using a cryptology module to encrypt data before transmission and decrypt data upon receipt, with a communication port for connectivity, an input device for user input, and a display for presenting encrypted or decrypted data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional cryptography systems are used with host-based encryption and decryption, then data can be transmitted between hosts, but security is compromised due to supply chain vulnerabilities and inability to audit third-party hardware and software

Engineering Contradiction:
Improvedata securityVSAvoidfirmware and software complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the encryption and decryption functions from the host system and relocates them to the peripheral interface device. This removes the security vulnerability of host-based cryptography by isolating sensitive cryptographic operations to a dedicated, auditable module within the peripheral device, thereby improving reliability without requiring complex host firmware.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a cryptology module as an intermediary component within the peripheral interface device. This module acts as a trusted mediator that handles encryption of outbound data and decryption of inbound data, eliminating the need for hosts to perform cryptographic operations and reducing security dependencies on host software integrity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If encryption is performed at the host before transmission, then data can be secured during transit, but unencrypted data must still be transferred between hosts and peripheral devices

Engineering Contradiction:
Improvedata securityVSAvoidunencrypted data exposure
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary encryption action by encrypting data at the peripheral interface device before it leaves the device. This ensures that data is already encrypted when transmitted to the host, eliminating the window of exposure where unencrypted data would exist in transit or in host memory, thereby addressing the harmful factor of unencrypted data exposure.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If hosts perform encryption and decryption operations, then cryptographic functionality is available, but computational burden on host devices increases

Engineering Contradiction:
Improvecryptographic functionalityVSAvoidhost computing resources
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent extracts the computationally intensive encryption and decryption operations from the host system and assigns them to the peripheral interface device's cryptology module. This redistribution of computational tasks reduces the energy and processing resource consumption of the host device while maintaining full cryptographic functionality through the dedicated module in the peripheral device.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS11461507B2Systems and methods for secure peripherals
Publication Date: 2022.10.04 THIRD BLOCK GEAR
  • US11461507B2 patent drawing
  • US11461507B2 patent drawing
  • US11461507B2 patent drawing

AI summary

Systems and methods for an interface device that is configured to locally generated encrypted data and also receive encrypted data from a host computer, locally decrypt the data, and present the decrypted data independently from the host computer.