Secure Communication Channel Key Exchange Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing secure data transmission channels between devices is computationally heavy and generates excessive data traffic, particularly in machine-to-machine applications where data exchange is minimal, leading to high costs due to the need for repeated SSL/TLS handshaking processes.
Innovation Solution
A method where a secure communication channel is established once using asymmetric encryption, and a set of symmetric encryption keys is transmitted and stored for future use, eliminating the need for repeated handshaking by using these keys for subsequent data transmissions, with optional expiry dates and validity checks to ensure security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SSL/TLS handshaking process is performed for each connection to establish secure transmission channel, then secure data transmission is ensured, but data traffic and computational overhead increase significantly
Solution Approach 1:
The patent applies preliminary action by establishing the secure transmission channel and exchanging encryption keys in advance, before the actual data transmission begins. The server and client perform SSL/TLS handshaking and key exchange once, storing the symmetric encryption keys for future use, thereby avoiding repeated handshaking for subsequent connections.
Solution Approach 2:
The patent implements dynamics by making the encryption key management adaptive: the system uses pre-exchanged symmetric keys for multiple connections, but automatically triggers a new SSL/TLS handshaking process when the stored keys expire or when a new connection is required, thus dynamically adjusting the security protocol based on connection needs.
2Reliability
If SSL/TLS handshaking is performed repeatedly for multiple connections, then secure transmission is maintained, but time and computational resources are consumed
Solution Approach 1:
The patent performs the time-consuming SSL/TLS handshaking and key exchange process in advance, before actual data transmission. The symmetric encryption keys are exchanged once and stored for multiple subsequent connections, eliminating the need for repeated handshaking and significantly reducing the time required for each connection.
Solution Approach 2:
The patent enables continuous data transmission using the pre-exchanged symmetric encryption keys without interrupting the workflow for handshaking. Multiple connections can be established and data can be transmitted continuously using the stored keys, maintaining uninterrupted useful action until key expiration.
3Quantity of substance
If symmetric encryption keys are exchanged and stored for future use, then data traffic is reduced, but security management complexity increases
Solution Approach 1:
The patent implements feedback mechanisms where the server tracks the expiration dates of exchanged symmetric encryption keys and monitors incoming connection requests. When a connection is required, the system checks whether valid keys are available and whether they have expired, automatically triggering a new key exchange process if necessary, thus managing complexity through automated feedback-driven key renewal.
Solution Approach 2:
The system performs self-service by automatically managing the encryption key lifecycle: the server and client autonomously exchange keys, store them securely, track their expiration, and initiate renewal processes without external intervention. This self-managed approach reduces the need for complex external key management infrastructure.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The document discloses a method for secure data transmission between a first device (client) and a second device (server), comprising the following steps: establishing a secure communication channel between the first device and the second device; transmitting a set of symmetric encryption keys from the first device to the second device under secure transmission conditions through the secure communication channel, and storing the set of symmetric encryption keys in respective protected storage memory areas at the fist device and at the second device. When the second device is required to transmit data to the first device, the following steps are performed: selecting one of said symmetric encryption keys at the second device; generating a data bunch at the second device and encrypting the data bunch with the selected symmetric encryption key; transmitting the encrypted data bunch from the second device to the first device; decrypting the encrypted data bunch at the first device using the selected symmetric encryption key.