Secure Messaging Key Wrapping for Revocable Message Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure messaging systems rely on asymmetric cryptography where only the recipient can decrypt messages, limiting control over access to the message content.
Innovation Solution
A method involving encryption of payload information and a first decryption key using different decryption keys, where the second decryption key is kept secret from the recipient, allowing the sender to control access by managing distribution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If end-to-end encryption is implemented in messaging applications, then security and confidentiality of communications are improved, but compatibility across different devices and operating systems deteriorates
Solution Approach 1:
The patent introduces a key distribution server as an intermediary component that mediates between encryption requirements and cross-platform compatibility. The server stores encrypted private keys and distributes them to clients based on device identifiers, enabling secure end-to-end encryption while maintaining compatibility across different devices and operating systems without requiring pre-shared secrets or complex key exchange protocols between each pair of devices
2Reliability
If secure communication protocols are implemented, then protection against unauthorized access and manipulation is improved, but ease of use deteriorates due to complex key management
Solution Approach 1:
The system implements self-service key management where the key distribution server automatically performs key generation, encryption, storage, and distribution based on device identifiers. Users do not need to manually manage cryptographic keys or configure security settings - the system handles all key management operations automatically, maintaining strong security while preserving ease of use
Solution Approach 2:
Private keys are pre-generated and encrypted with device identifiers before being stored on the key distribution server. This preliminary key preparation eliminates the need for real-time key exchange or manual configuration during message transmission, simplifying the user experience while maintaining security
3Adaptability or versatility
If message contents are stored on servers for backup and retrieval, then accessibility and recoverability are improved, but security and confidentiality deteriorate
Solution Approach 1:
The patent applies different quality characteristics to different parts of the system: message contents are encrypted with strong encryption algorithms when stored on servers for backup and accessibility, while decryption capability is localized to the user's device through secure storage of private keys. This ensures that server-stored messages remain confidential unless the user actively decrypts them on their own device, maintaining both accessibility and confidentiality
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
It is inter-alia disclosed a method performed by an apparatus, said method comprising: - obtaining a payload information item that is to be communicated to at least one recipient, - obtaining an encrypted payload information item by encrypting said payload information item such that it is decryptable by use of a first decryption key, - obtaining an encrypted first decryption key by encrypting said first decryption key such that it is decryptable by use of a second decryption key which is not known by said at least one recipient, and - sending or triggering sending a message containing said encrypted payload information item and said encrypted first decryption key to said at least one recipient.