Peer-to-Peer Certified Document Exchange with Session-Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for transmitting sensitive documents are insecure, risking compromise by third parties, especially in unsecure networks like the internet.
Innovation Solution
A system utilizing decentralized storage and a trusted API provider for peer-to-peer secure document exchange, where documents are encrypted with session keys and stored in decentralized storage, with a trusted API managing access and retrieval.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If documents are transmitted using typical methods (email, file hosting service), then ease of operation is improved, but security is worsened due to risk of compromise by third parties
Solution Approach 1:
The patent introduces a decentralized storage system as an intermediary that enables secure peer-to-peer document exchange. The system uses distributed hash tables and cryptographic key pairs to mediate between document provider and verifier, allowing secure transmission without relying on traditional centralized services that are vulnerable to third-party compromise.
Solution Approach 2:
The patent replaces traditional mechanical/document-based transmission systems (email attachments, file hosting) with a cryptographic system based on public-key infrastructure. Documents are encrypted with verifiers' public keys and stored in decentralized storage, substituting the mechanical transmission process with cryptographic protection and distributed storage mechanisms.
2Reliability
If decentralized storage and encryption are implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent segments the document exchange system into distinct functional components: document providers who upload encrypted documents to decentralized storage, verifiers who retrieve and decrypt documents, and a trusted API provider that manages the decentralized storage infrastructure. This segmentation allows each party to have simplified client software while maintaining overall system security through distributed architecture.
Data Source
AI summary
Systems and methods for peer-to-peer secure document exchange are disclosed. The system may allow a document provider to securely transmit a certified document to a document verifier using decentralized storage. The verifier system may generate a session key pair and transmit a session public key to a trusted API provider. The trusted API provider may generate a session nonce. The verifier system may transmit the session nonce to the provider system. The provider system may use the session nonce to retrieve the session public key. The provider system may encrypt a certified document using the session public key and store the encrypted certified document in the decentralized storage. The verifier system may retrieve the encrypted certified document by polling the trusted API provider based on the session nonce. The verifier system may decrypt the encrypted certified document using the session private key.


