Proxy-Based Secure Multi-Party Communication Protocol
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems are not well-suited for secure communication in complex scenarios involving multiple smart devices that may not always be connected to the network, requiring secure communication protocols that can handle asynchronous communication and multiple service providers while maintaining privacy and security.
Innovation Solution
The implementation of a system that allows secure communication between multiple parties using a single message, where each recipient can decrypt only their intended data, with intermediaries forwarding messages without accessing unauthorized data, and utilizing a proxy computer to route communications without decrypting them.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional security protocols require devices to perform security handshake protocol with server computer, then secure communication is established, but network complexity increases and communication efficiency decreases
Solution Approach 1:
The patent combines multiple security handshakes into a single protocol execution. The server establishes cryptographic contexts with multiple devices simultaneously, allowing parallel key establishment without requiring separate handshake protocols for each device pair. This merging reduces network complexity while maintaining secure communication reliability.
Solution Approach 2:
The server computer performs multiple functions within a single security protocol execution: establishing cryptographic contexts with multiple devices, generating shared secrets for each device, and enabling secure communication paths simultaneously. This multi-functionality reduces the number of protocol executions needed while maintaining security.
2Adaptability or versatility
If multiple smart devices communicate with multiple service provider computers, then communication versatility increases, but network complexity and resource sharing challenges increase
Solution Approach 1:
The patent segments the communication network into device-specific cryptographic contexts. Each device has its own cryptographic context with unique cryptographic parameters and shared secrets, isolating security management for each device while allowing the server to handle multiple devices through a unified protocol framework. This segmentation enables communication versatility without proportionally increasing network complexity.
3Adaptability or versatility
If devices are asynchronous and not always connected to network, then device autonomy increases, but secure communication reliability decreases
Solution Approach 1:
The patent performs preliminary cryptographic key establishment before devices need to communicate. The server pre-establishes cryptographic contexts and shared secrets with devices when they are online, storing these cryptographic parameters for later use. This preliminary action ensures that when asynchronous devices reconnect, secure communication can be immediately established without requiring real-time server availability, thus maintaining reliability while supporting device autonomy.
Data Source
AI summary
Embodiments extend protocols for secure communication between two parties to allow a party to securely communicate with multiple parties using a single message. For example, the sending party can determine a unique shared secret for each recipient and encrypt data for a recipient using a session key generated from the corresponding shared secret. The encrypted data can be combined into a single message, and each recipient can decrypt only the subset of the message that it is authorized to.