Secure Messaging Key Updates for Authorized Chat Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure messaging services lack robust security measures, allowing unauthorized access and leakage of conversation contents if entry passwords or authentication tokens are compromised, necessitating a secure messaging method that ensures encryption keys are dependent on chat room members and updated when new members join, and limits access to approved terminals.
Innovation Solution
A method involving generating encryption keys based on chat room members' public and private keys, updating keys when new members join, and ensuring only one terminal per user can access a chat room, using asymmetric encryption algorithms like DSA, RSA, and ECC, with frequent key regeneration to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If only an entry password or authentication token is used for secure messaging, then ease of operation is improved, but reliability is worsened because conversation contents may be leaked if the password or token is compromised
Solution Approach 1:
The authentication mechanism is segmented into multiple independent layers: entry authentication (password/token) and message-level authentication (encryption keys). Each layer provides independent security, so compromise of one layer does not expose the other. The encryption key is segmented into components derived from multiple users' public keys, ensuring that no single user can decrypt messages alone.
Solution Approach 2:
Encryption keys are generated and distributed to authorized users before any message exchange occurs. The system performs preliminary key establishment through public key inquiry and encryption key generation, so that when messages are exchanged, the security framework is already in place. This preliminary action ensures that security is built-in rather than added retroactively.
2Reliability
If encryption keys are made dependent on chat room members and updated when new members join, then reliability is improved, but device complexity is worsened due to key management requirements
Solution Approach 1:
The system enables self-service key management where each user's terminal automatically performs public key inquiry, encryption key generation, and key distribution to authorized users. The service server automatically manages key updates when users join or leave chat rooms, eliminating the need for manual key management intervention. This automation reduces the perceived complexity for end users while maintaining high reliability.
Solution Approach 2:
The service server performs multiple functions: it stores public keys, manages user authentication, generates encryption keys, distributes keys to terminals, and updates keys when chat room composition changes. This multi-functional approach consolidates complexity into a single server system rather than requiring complex key management logic in each user terminal.
3Adaptability or versatility
If multiple terminals per user are allowed to access chat rooms, then adaptability is improved, but reliability is worsened because unauthorized terminals may access conversations
Solution Approach 1:
Each terminal is assigned a unique encryption key specific to that terminal instance, not just to the user account. When a user accesses the chat room from a specific terminal, that terminal's public key is used to generate the encryption key for message protection. This ensures that even if a user has multiple terminals, each terminal's messages are protected by its own key, preventing unauthorized access between terminals.
Solution Approach 2:
The service server acts as an intermediary that verifies terminal authorization before allowing chat room access and key distribution. The server maintains a mapping between users and their authorized terminals, and only distributes encryption keys to terminals that have been explicitly authorized. This intermediary layer enables multiple terminals per user while maintaining security through centralized authorization control.
Data Source
AI summary
Provided are a method and an apparatus for providing a secure message service. The method according to some embodiments includes inquiring a public key of a counterpart user to be invited to a chat room, generating an encryption key related to the chat room using the inquired public key and a private key of a chat room opening user, and transmitting the encryption key to be delivered to a terminal of the counterpart user.