Secure Broadcast Message Encryption and Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security protocols for broadcasting messages to multiple recipients lack assurance that all recipients receive the same message, and modifications to the message can lead to rejection, with existing methods not adequately addressing the need for secure and uniform delivery.

Innovation Solution

The solution involves generating and using a broadcast key to create encryption and message authentication codes (MAC) via a key derivation function, which are then used to encrypt and authenticate messages, ensuring that each recipient receives the same message by regenerating keys and validating the MAC upon receipt.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a message is broadcast to multiple recipients using existing security protocols, then the message can be sent to multiple recipients, but there is no assurance that all recipients receive the same message and modifications cannot be detected

Engineering Contradiction:
Improvemessage integrityVSAvoidsecurity protocol complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines message encryption and authentication into a single broadcast message structure. The encryption key and authentication code are merged into one transmission, allowing recipients to simultaneously decrypt and verify the message integrity without requiring separate protocols or transmissions.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The broadcast message structure serves multiple functions simultaneously: it encrypts the message content, provides authentication through the authentication code, and enables verification of message uniformity across all recipients. This multi-functional approach eliminates the need for multiple separate security mechanisms.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If existing group-key distribution protocols are used to encrypt broadcast messages, then key management can be handled, but the protocols are complex and do not provide sufficient assurance of message uniformity across recipients

Engineering Contradiction:
Improvekey distribution capabilityVSAvoidprotocol structure
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent extracts the essential security functions from complex group-key distribution protocols and implements only the necessary components: encryption key generation, message encryption, and authentication code generation. This extraction eliminates unnecessary protocol complexity while maintaining key distribution capability and message uniformity assurance.

Inventive Principle:
Principle #2Taking out (Extraction)

3Ease of operation

If messages are broadcast without proper authentication mechanisms, then transmission is simple, but modifications to messages cannot be detected and security is compromised

Engineering Contradiction:
Improvebroadcast simplicityVSAvoidmessage authentication
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication code is generated and attached to the encrypted message before broadcasting. This preliminary authentication preparation allows recipients to immediately verify message integrity upon receipt without requiring additional communication rounds or complex verification protocols, maintaining broadcast simplicity while ensuring security.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3482527B1Apparatus, computer program, and method for securely broadcasting messages
Publication Date: 2021.02.24 DIGITAL 14 LLC
  • EP3482527B1 patent drawingFigure 1
  • EP3482527B1 patent drawingFigure 2
  • EP3482527B1 patent drawingFigure 3

AI summary

An apparatus, computer program, and method are provided for securely broadcasting a message to a plurality of recipient devices. In operation, a message is identified, and the message is encrypted utilizing a first key. A message authentication code (MAC) is generated utilizing a second key that is mathematically coupled to the first key (that is utilized to encrypt the message). The encrypted message is caused to be broadcasted to a plurality of recipient devices, utilizing the MAC.