Rotating Key Communications Through Filtered Network Paths

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing network infrastructure is inadequate for securing and reliably handling the increasing volume and variety of electronic communications, particularly those involving sensitive data, as it relies on network components to ensure security and reliability.

Innovation Solution

The system allows an applet on a device to determine specific components for electronic communications, generating a rotating key for secure connections, independent of network governance, by considering processing characteristics and filtering connection paths based on criteria such as network use, cost, and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional network infrastructure is used to govern electronic communications, then network components can assign addresses and routes, but security and reliability depend on network infrastructure which is inadequate for increasing volume and variety of communications

Engineering Contradiction:
Improvesecurity and reliability of electronic communicationsVSAvoidability to accommodate different types and volumes of electronic communications
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent segments the communication control function from the network infrastructure. Instead of relying on network components to govern communications, the system divides control into: (1) network infrastructure that provides basic connectivity, and (2) endpoint devices that independently select components and generate rotating keys. This segmentation allows the system to maintain security control at endpoints while using existing network infrastructure, thereby improving both reliability and adaptability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system performs preliminary actions by pre-selecting communication components and pre-generating rotating keys before actual data transmission. The endpoint device determines which servers, connection paths, and cryptographic keys to use in advance, based on processing characteristics. This preliminary selection and key generation occurs independent of network governance, enabling secure communications to proceed without relying on network infrastructure for security decisions.

Inventive Principle:
Principle #10Preliminary action

2Ease of operation

If network infrastructure governs component selection for electronic communications, then routing and addressing are managed centrally, but this creates reliance on network to ensure security which is inadequate

Engineering Contradiction:
Improvecentralized management of routing and addressingVSAvoidsecurity assurance by network infrastructure
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent inverts the traditional control model by shifting security and component selection authority from the network infrastructure to the endpoint devices. Instead of the network assigning addresses and routes and ensuring security, the endpoint devices independently determine communication components and generate rotating keys. This inversion maintains ease of operation through automated selection while improving reliability by removing dependence on inadequate network security governance.

Inventive Principle:
Principle #13The other way round (Inversion)

3Ease of manufacture

If existing networking infrastructure is used, then basic communication functionality is provided, but it was not designed to accommodate different types of electronic communications in current amounts

Engineering Contradiction:
Improveuse of existing network infrastructureVSAvoidaccommodation of different types and volumes of communications
Core Design Contradiction:
Ease of manufactureVSAdaptability or versatility

Solution Approach 1:

The patent applies universality by creating a component selection mechanism that can handle multiple types of electronic communications through a single framework. The endpoint device's ability to determine communication components based on processing characteristics makes the system versatile across different communication types and volumes, while still utilizing existing network infrastructure for basic connectivity. This multi-functional approach allows the same infrastructure to support diverse communication needs.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Reliability

If rotating keys are generated based on filtered connection paths, then security is improved, but additional processing steps are required

Engineering Contradiction:
Improvesecurity of electronic communicationVSAvoidprocessing steps for key generation
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The endpoint device performs self-service by autonomously determining communication components, filtering connection paths based on processing characteristics, and generating rotating keys without external intervention. This self-service capability improves security through independent key generation while managing complexity through automation. The device serves itself in the security process, eliminating the need for additional centralized processing steps.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS12489732B2Systems and methods for performing secure communications with rotating key communications
Publication Date: 2025.12.02 CAPITAL ONE SERVICES LLC
  • US12489732B2 patent drawing
  • US12489732B2 patent drawing
  • US12489732B2 patent drawing

AI summary

Systems and methods are described for performing secure communications with rotating key communications. For example, the system may receive a first applet request to perform a first rotating key communication across one or more computer networks to access a first server host. The system may then determine a first processing characteristic for the first applet request and a first plurality of server locations of the first server host (e.g., across the one or more computer networks). The system may then determine a first plurality of connection paths to a first subset of the first plurality of server locations. The system may then filter the first plurality of connection paths to generate a first subset of the plurality of connection paths. Based on the first subset of the plurality of connection paths, the system may generate a first rotating key for performing the rotating key communication.