Secure Email System Using Hybrid Asymmetric-Symmetric Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing email solutions fail to ensure secure and private data transmission due to vulnerabilities in key management, allowing unauthorized access and interception, and do not meet regulatory standards for privacy and security, particularly in asymmetric key enciphering methods.
Innovation Solution
A secure email communication system that uses an asymmetric key pair to dynamically generate and encipher a key, which is then used to secure a digital data stream, with the enciphered data and key stored remotely to prevent key grab and reduce repetitive pattern detection risks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If asymmetric key enciphering is used, then key exchange practicality is improved, but security is worsened compared to symmetric key enciphering
Solution Approach 1:
The patent implements hybrid enciphering by nesting symmetric key enciphering within asymmetric key enciphering. A symmetric session key is generated and used to encipher the message, then this session key is enciphered using asymmetric keys for secure transmission. This nested approach combines the security advantages of symmetric enciphering with the key exchange便利性 of asymmetric enciphering.
Solution Approach 2:
The patent uses composite enciphering methodology combining both symmetric and asymmetric key mechanisms. The system employs asymmetric keys for key exchange and symmetric keys for data encryption, creating a composite security system that leverages the strengths of both approaches while mitigating their individual weaknesses.
2Reliability
If symmetric key enciphering is used, then security is improved, but key exchange practicality is worsened
Solution Approach 1:
The patent introduces asymmetric key pairs as an intermediary mechanism to facilitate secure symmetric key exchange. Instead of requiring direct private key sharing, the system uses public-private key pairs where the public key can be freely exchanged, and the private key remains secure. This intermediary approach enables symmetric enciphering security without its key exchange limitations.
3Productivity
If email providers scan and read emails for advertising purposes, then revenue is improved, but privacy is worsened
Solution Approach 1:
The patent applies preliminary anti-action by enciphering emails before they are transmitted to providers using hybrid enciphering with asymmetric keys. The enciphered content prevents providers from scanning or reading the messages, proactively blocking privacy invasion before it can occur. This pre-emptive encryption maintains user privacy while allowing providers to store and forward the encrypted data.
4Ease of operation
If system administrators have complete access to email accounts, then system management is improved, but security is worsened
Solution Approach 1:
The patent extracts the private key from the system administrator's control and places it exclusively in the user's possession. By using asymmetric key pairs where the private key never leaves the user's device and the public key is what gets stored on servers, the system separates management functionality from security-critical elements. Administrators can manage the system without having access to users' private keys or ability to decrypt their messages.
Data Source
AI summary
The present invention provides a method and system for securing a digital data stream. A first key of a first asymmetric key pair from a key store remote from a host node is received at the host node. A dynamically generated key is received at the host node, which is used to encipher the digital data stream. The dynamically generated key is enciphered with the first key of the first asymmetric key pair. The enciphered digital data stream and the enciphered dynamically generated key are stored remotely from the host node and the key store.