Secure Messaging via Portable Decryption Device
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing messaging and encryption technologies fail to secure message content once it is decrypted on potentially compromised computer systems, making it vulnerable to malware and unauthorized access.
Innovation Solution
A method involving encrypting content with a first key for transmission, scanning the encrypted content when displayed, and decrypting it with a second key for secure presentation, using a portable electronic device to apply a deciphering algorithm and display readable plaintext, while optionally removing encryption data or using geotag/geofence policies for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption methods are used to protect message content during transmission, then message confidentiality is improved, but the decrypted content becomes vulnerable to malware and unauthorized access on the recipient's terminal
Solution Approach 1:
The patent extracts the decryption function from the potentially compromised terminal environment and relocates it to a trusted portable electronic device. The encrypted content remains on the terminal until the moment of decryption, at which point it is immediately transferred to the portable device for decryption and display, eliminating the window of exposure to malware on the terminal system.
Solution Approach 2:
The portable electronic device serves as an intermediary between the terminal system and the decrypted content. It receives encrypted content from the terminal, performs decryption in a isolated environment, and displays the plaintext without allowing it to be stored or processed on the potentially compromised terminal, thus mediating the security risk.
2Ease of operation
If encrypted content is stored and processed on the recipient's computer system, then ease of access is improved, but security against unauthorized access deteriorates
Solution Approach 1:
Instead of storing and processing encrypted content on the terminal system, the patent uses a portable electronic device that can be physically carried by the user. The device copies the encrypted content temporarily for decryption purposes and then deletes it, providing accessibility without permanent storage on vulnerable systems.
Solution Approach 2:
The system segments the encryption/decryption process from the storage and display functions. Encrypted content remains on the terminal system, while the portable device handles only the temporary decryption and display operations, separating the vulnerable storage function from the secure processing function.
3Loss of time
If decryption is performed on the terminal system for immediate viewing, then response time is improved, but vulnerability to malware increases
Solution Approach 1:
The patent implements a rapid decrypt-and-delete process where encrypted content is decrypted immediately upon being transferred to the portable device, displayed briefly to the user, and then automatically deleted without being stored. This rushes through the decryption process so quickly that there is no opportunity for malware to intercept or steal the plaintext.
Data Source
AI summary
In order to capture electronic information provided by a user to another user different third parties seek to download tracking software, viruses etc. to the user's computer systems. These may include, but are not limited to, message intercepting, email logging, hacking, spamming, phishing, spyware, malware, keyloggers, screen capturing, Trojan horses, WWW robots (BOTs or bots), IP spoofing, man-in-the-middle attacks, worms and viruses. Whilst within the prior art methodologies exist to protect the message by converting the plaintext at the sender's terminal to ciphertext for transmission before it is re-converted to plaintext at the receiver's (or recipient's) terminal once decrypted the message content, now in plaintext is accessible to malware, Trojan horse software, etc. upon the recipient's terminal allowing its contents to be acquired and transmitted without the recipient's and/or sender's knowledge. Accordingly, it would be beneficial to provide users with methods and systems enabling secure messaging to be undertaken as well as secure document transmission and viewing that overcomes the limitations within the prior art. Accordingly, beneficially embodiments of the invention provide secure messaging and secure document transmission even upon potentially compromised desktop computers.