Secure Communication in Nondeterministic Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Nondeterministic networks are vulnerable to tampering due to their unpredictable nature, allowing malicious actors to intercept and modify communications, compromising security even if one node is compromised.

Innovation Solution

The system determines dynamic communication paths and encrypts messages using a set of encryption keys, with each node partially decrypting and re-encrypting the message, and records transactions on a blockchain to ensure secure communication across the network.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If nodes communicate in nondeterministic networks with dynamic routing, then network flexibility and adaptability improve, but security and reliability deteriorate due to vulnerability to tampering and interception

Engineering Contradiction:
Improvenetwork flexibilityVSAvoidcommunication security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The message is divided into multiple encrypted segments, each encrypted with a different key from the set of encryption keys. Each segment is transmitted separately through the nondeterministic network, so that even if some segments are intercepted or tampered with, the complete message remains secure unless all segments are compromised.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements nested encryption where messages are encrypted multiple times with different keys in sequence. Each encryption layer is nested within the previous one, creating an onion-like structure where the message must pass through multiple decryption layers, each verified by the verification module to ensure integrity.

Inventive Principle:
Principle #7Nested doll (Nesting)

Solution Approach 3:

The verification module provides feedback by checking each decrypted segment against expected integrity criteria. If verification fails at any stage, the system can detect tampering and reject the message, creating a feedback loop that maintains security despite the nondeterministic nature of the network.

Inventive Principle:
Principle #23Feedback

2Reliability

If encryption keys are used to secure messages in transit, then communication security improves, but device complexity increases due to key management requirements

Engineering Contradiction:
Improvemessage securityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The set of encryption keys serves multiple functions: encrypting message segments, verifying message integrity, and enabling secure communication without requiring separate key pairs for each communication direction. This multi-functionality reduces the overall key management complexity while maintaining strong security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system automatically manages the encryption and decryption process using the set of keys, with the verification module automatically checking message integrity. This self-service approach reduces the burden on users to manually manage key complexity while maintaining security.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3547642B1Secure communication in a nondeterministic network
Publication Date: 2020.07.15 LENOVO (SINGAPORE) PTE LTD
  • EP3547642B1 patent drawingFigure 1A
  • EP3547642B1 patent drawingFigure 1B
  • EP3547642B1 patent drawingFigure 1C

AI summary

For secure communication in a nondeterministic network, a processor determines a first communication path to a first destination node in a network of nodes organized as an undirected graph. The communication path is a spanning tree of path nodes of the undirected graph. The processor further encrypts a message to the first destination node with an encryption using a set of first encryption keys. In addition, the processor communicates the encrypted message over the path nodes of the first communication path. Each transaction of each path node with the encrypted message is recorded and the encrypted message is decrypted at the first destination node with a subset of the set of first encryption keys. The subset of the set of first encryption keys are held by key holding nodes in communication with the first destination node.