Secure Payload Data Transmission via Segmented Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure communication methods face challenges in balancing security, usability, and efficiency, particularly in large data transmissions, which can be bandwidth-intensive and inefficient, especially when involving mobile devices.
Innovation Solution
The technique involves transmitting payload data encrypted once from a server system to a destination system within a conveyance message, with the return message containing a recipient's password or passphrase and an encrypted payload key, allowing the server system to decrypt and resend the payload key securely, thereby avoiding repeated data transmissions and conserving bandwidth.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the encrypted payload data is transmitted back and forth multiple times between sender and receiver apparatus, then high security and usability are achieved, but communication bandwidth is consumed excessively
Solution Approach 1:
The patent segments the data transmission process into two distinct parts: (1) transmitting only the encrypted payload data in the conveyance message, and (2) transmitting only the decryption key in the return message. This segmentation allows the system to maintain high security through encrypted transmission while minimizing bandwidth consumption by avoiding redundant transmission of large payload data multiple times.
2Productivity
If the payload data is transmitted in plaintext over the secured communication channel, then transmission efficiency is improved, but security is compromised if the channel is compromised
Solution Approach 1:
The patent extracts the decryption key from the payload data and transmits it separately in the return message. The payload data itself is never transmitted in plaintext over the secured communication channel - only the encrypted version is sent in the conveyance message. This extraction approach maintains transmission efficiency while ensuring that even if the channel is compromised, the payload data remains secure.
3Reliability
If large volumes of payload data are transmitted encrypted multiple times, then high security is maintained, but bandwidth consumption becomes particularly problematic for mobile devices
Solution Approach 1:
The patent segments the transmission content into minimal essential elements: the conveyance message contains only the encrypted payload data, while the return message contains only the decryption key. This segmentation dramatically reduces the total data transmission volume compared to transmitting the entire payload data multiple times, making the system particularly suitable for mobile devices with limited bandwidth.
4Reliability
If the encrypted payload data is transmitted back to the sender apparatus for decryption, then security is enhanced, but the number of transmission rounds increases
Solution Approach 1:
The patent implements preliminary action by having the server system decrypt the payload data using the decryption key received in the return message, and then transmit the decrypted data directly to the destination system. This eliminates the need for the destination system to request decryption services, reducing the number of transmission rounds and communication time while maintaining security through the use of the decryption key.
Data Source
AI summary
Secure communication of payload data is provided from a server system to a destination system used by a recipient. The recipient is associated with a key pair including a public key and a private key, the private key being protected by a password or passphrase of the recipient. The server system generates and sends a conveyance message to the destination system. The conveyance message contains at least the payload data encrypted using a payload key. After receipt of the conveyance message, the destination system prompts the recipient for his or her password or passphrase. The server system uses the recipient's password or passphrase to access the recipient's private key, and then uses the private key to decrypt the encrypted version of the payload key. The server system sends the payload key to the destination system, and the destination system in turn uses the payload key to decrypt the payload data.