Secure Channel Provider for Confidential Data Insertion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for secure data transmission over networks are vulnerable at the human-to-computer interface, as viral programs can intercept sensitive information before encryption, especially when users input data into applications like web browsers.
Innovation Solution
A method that generates a request for a secure channel provider to transmit sensitive information to a remote device, using insertion point codes to dynamically insert data into a message without the application accessing it in unencrypted form, ensuring encryption and message authentication occur before transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensitive information is transmitted through an application program over a network, then data transmission functionality is achieved, but the information becomes vulnerable to interception by viral programs monitoring keyboard inputs or data passing through the application
Solution Approach 1:
The patent extracts the sensitive information handling from the application program's control flow. The application generates a request with insertion point codes but does not directly handle the sensitive information. Instead, a secure channel provider separately obtains the sensitive information from a source outside the application program and inserts it at the specified locations, thereby removing the information from the application's accessible scope and preventing viral programs from intercepting it through the application's data paths
Solution Approach 2:
The patent introduces a secure channel provider as an intermediary between the application program and the sensitive information. The application program communicates only with the secure channel provider through encrypted requests containing insertion point codes, never directly accessing the sensitive information. This intermediary architecture ensures that even if the application is compromised, the sensitive information remains protected as it never passes through the application's unencrypted data flow
2Device complexity
If the application program directly handles sensitive information for transmission, then transmission functionality is simplified, but the information is exposed in unencrypted form within the application's data flow
Solution Approach 1:
The patent segments the transmission process into distinct functional components: the application program generates a structured request with insertion point codes, the secure channel provider separately obtains sensitive information from external sources, and then combines them through secure insertion. This segmentation allows each component to perform its specific function without exposing the sensitive information to unnecessary parts of the system, maintaining simplicity while enhancing security
Solution Approach 2:
The patent implements preliminary action by having the application program prepare the request structure with insertion point codes before the sensitive information is obtained or inserted. The secure channel provider first establishes the encrypted request framework, then separately acquires the sensitive information, and finally inserts it into the pre-prepared structure. This preliminary preparation of the encrypted framework ensures that the sensitive information is never exposed in unencrypted form within the application's data flow
Data Source
AI summary
Methods and apparatus for securely transmitting sensitive information to a remote device at the request of an application program are provided. The application program generates a request to a secure channel provider to make a transmission to a remote device. A first message is passed from the from the application program to the secure channel provider containing insertion point codes indicating locations within the first message where the sensitive information should be inserted. Sensitive information is obtained from a source outside of the application program and the sensitive information is inserted into the first message at the locations in the first message indicated by the insertion point codes to form a second message containing the sensitive information. The second message is encrypted and this encrypted message is transmitted to the remote device. The sensitive information is unaccessed by the application program during the execution of the method.