Secure Communication Channel Key Exchange Mechanism

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Establishing secure data transmission channels between devices is computationally heavy and generates excessive data traffic, particularly in machine-to-machine applications where data exchange is minimal, leading to high costs due to the need for repeated SSL/TLS handshaking processes.

Innovation Solution

A method where a secure communication channel is established once using asymmetric encryption, and a set of symmetric encryption keys is transmitted and stored for future use, eliminating the need for repeated handshaking by using these keys for subsequent data transmissions, with optional expiry dates and validity checks to ensure security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If SSL/TLS handshaking process is performed for each connection to establish secure transmission channel, then secure data transmission is ensured, but data traffic and computational overhead increase significantly

Engineering Contradiction:
Improvesecure data transmissionVSAvoiddata traffic
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent applies preliminary action by establishing the secure transmission channel and exchanging encryption keys in advance, before the actual data transmission begins. The server and client perform SSL/TLS handshaking and key exchange once, storing the symmetric encryption keys for future use, thereby avoiding repeated handshaking for subsequent connections.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements dynamics by making the encryption key management adaptive: the system uses pre-exchanged symmetric keys for multiple connections, but automatically triggers a new SSL/TLS handshaking process when the stored keys expire or when a new connection is required, thus dynamically adjusting the security protocol based on connection needs.

Inventive Principle:
Principle #15Dynamics

2Reliability

If SSL/TLS handshaking is performed repeatedly for multiple connections, then secure transmission is maintained, but time and computational resources are consumed

Engineering Contradiction:
Improvesecure transmissionVSAvoidhandshaking time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs the time-consuming SSL/TLS handshaking and key exchange process in advance, before actual data transmission. The symmetric encryption keys are exchanged once and stored for multiple subsequent connections, eliminating the need for repeated handshaking and significantly reducing the time required for each connection.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent enables continuous data transmission using the pre-exchanged symmetric encryption keys without interrupting the workflow for handshaking. Multiple connections can be established and data can be transmitted continuously using the stored keys, maintaining uninterrupted useful action until key expiration.

Inventive Principle:
Principle #20Continuity of useful action

3Quantity of substance

If symmetric encryption keys are exchanged and stored for future use, then data traffic is reduced, but security management complexity increases

Engineering Contradiction:
Improvedata trafficVSAvoidkey management
Core Design Contradiction:
Quantity of substanceVSDevice complexity

Solution Approach 1:

The patent implements feedback mechanisms where the server tracks the expiration dates of exchanged symmetric encryption keys and monitors incoming connection requests. When a connection is required, the system checks whether valid keys are available and whether they have expired, automatically triggering a new key exchange process if necessary, thus managing complexity through automated feedback-driven key renewal.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system performs self-service by automatically managing the encryption key lifecycle: the server and client autonomously exchange keys, store them securely, track their expiration, and initiate renewal processes without external intervention. This self-managed approach reduces the need for complex external key management infrastructure.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3299988B1Secure communication method and system
Publication Date: 2021.03.10 FIMER
  • EP3299988B1 patent drawingFigure 1
  • EP3299988B1 patent drawingFigure 2
  • EP3299988B1 patent drawingFigure 3

AI summary

The document discloses a method for secure data transmission between a first device (client) and a second device (server), comprising the following steps: establishing a secure communication channel between the first device and the second device; transmitting a set of symmetric encryption keys from the first device to the second device under secure transmission conditions through the secure communication channel, and storing the set of symmetric encryption keys in respective protected storage memory areas at the fist device and at the second device. When the second device is required to transmit data to the first device, the following steps are performed: selecting one of said symmetric encryption keys at the second device; generating a data bunch at the second device and encrypting the data bunch with the selected symmetric encryption key; transmitting the encrypted data bunch from the second device to the first device; decrypting the encrypted data bunch at the first device using the selected symmetric encryption key.