Quantum-Safe Secure Distribution Network

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current security protocols, such as Transport Layer Security (TLS), are vulnerable to attacks from quantum computers due to their reliance on asymmetric cryptographic keys, which may become obsolete with the advent of quantum computing, necessitating post-quantum secure data exchange solutions.

Innovation Solution

A secure distribution system that authenticates users via zero-knowledge authentication and associates unique quantum-safe cryptographic keys with data objects, encrypting them and releasing these keys exclusively for decryption, utilizing post-quantum cryptographic methods like symmetric keys or lattice-based cryptography to ensure robust security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If asymmetric cryptographic keys are used for data security, then current security protocols can be implemented, but the system becomes vulnerable to quantum computer attacks

Engineering Contradiction:
Improvesecurity against quantum attacksVSAvoidcompatibility with current protocols
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent transitions from asymmetric cryptographic parameters (public-private key pairs) to symmetric cryptographic parameters (single secret key), fundamentally changing the cryptographic parameter structure to achieve quantum resistance while maintaining protocol compatibility

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

Instead of using the conventional asymmetric key exchange approach, the patent inverts the model by using symmetric encryption where the same key serves both encryption and decryption functions, eliminating the vulnerability to quantum attacks while preserving security objectives

Inventive Principle:
Principle #13The other way round (Inversion)

2Power

If quantum computing capability is developed, then computational capacity increases, but existing security protocols become obsolete

Engineering Contradiction:
Improvecomputational capacityVSAvoidprotocol security
Core Design Contradiction:
PowerVSReliability

Solution Approach 1:

The patent applies preliminary anti-action by pre-emptively adopting symmetric cryptographic methods that are resistant to quantum computing attacks, countering the future threat of quantum decryption before it becomes a practical vulnerability

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The system performs preliminary action by establishing quantum-resistant encryption protocols in advance, ensuring that data protected by these protocols will remain secure even as computational power evolves, rather than waiting for quantum threats to materialize

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11245527B2Secure distribution networks
Publication Date: 2022.02.08 SEAGATE TECH LLC
  • US11245527B2 patent drawing
  • US11245527B2 patent drawing
  • US11245527B2 patent drawing

AI summary

Secure distribution of data objects using a unique quantum-safe cryptographic key provided to a user requesting the data object that has been authenticated using a zero-knowledge authentication. A user may access the system by way of the zero-knowledge authentication to request access to a data object of a data library. The system may generate and associate a unique quantum-safe cryptographic key for the instance of the data library to be provided to the authenticated user. The data object is encrypted using the unique quantum-safe cryptographic key. The encrypted data object and the unique quantum-safe cryptographic key are provided to the authenticated user. Other instances of the data object may also be encrypted with other unique quantum-safe cryptographic keys. In turn, access to a unique quantum-safe cryptographic key may not be useful in decrypting other instances of the data object, and other data objects may not be decrypted using a given unique key for a given data object instance.