Secure Peer-to-Peer Data Exchange via Public Key-Value Store
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication protocols rely on centralized servers for facilitating connections between client devices, which can lead to metadata logging and potential privacy issues, as metadata can reveal user information intended to remain private.
Innovation Solution
Implementing a method using public key-value data stores where client devices generate a shared secret key pair through Diffie-Hellman key exchange, allowing secure storage and retrieval of information without a centralized server, utilizing a decentralized or centralized storage system that is publicly accessible but secure due to encryption and digital signatures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a centralized server is used to facilitate communications between client devices, then connection establishment and message transfer are enabled, but metadata logging occurs which compromises user privacy
Solution Approach 1:
The patent extracts the harmful metadata logging function from the centralized server by implementing direct peer-to-peer communication between client devices. This allows connection establishment without a mediating server that would log metadata, thereby removing the source of the privacy compromise while maintaining the ability to facilitate communications.
Solution Approach 2:
The patent introduces cryptographic protocols as an intermediary mechanism that enables secure direct communication between client devices without requiring a centralized server. This intermediary layer provides the necessary trust and coordination for peer-to-peer connections while preventing metadata logging by eliminating the need for server-mediated communication.
2Adaptability or versatility
If public key-value data store is used for decentralized storage, then centralized server dependency is eliminated, but data retrieval security must be ensured without centralized authentication
Solution Approach 1:
The patent changes the authentication parameter from centralized server-based authentication to cryptographic key-based authentication. By using public-private key pairs and digital signatures, the system enables decentralized data storage and retrieval while maintaining security through cryptographic verification of data authenticity and integrity without requiring centralized authentication.
Solution Approach 2:
The patent implements data replication across multiple decentralized storage nodes, creating copies of data in the public key-value data store. This distribution of data copies eliminates dependency on a single centralized server while maintaining data availability and security through cryptographic protection of each replicated copy.
Data Source
AI summary
In some embodiments, each client device in the network has a private key and a public key. For two client devices to securely exchange information, each computes a shared secret based on its own private key and the other's public key. The client devices use the shared secret to generate a shared secret key pair. The shared secret public key is used as a key by each client device to store data in a public key-value data store to share with the other client device. The shared data is signed using the shared secret key pair. The shared data may also be encrypted using the shared secret key pair. Each client device uses the shared secret public key to retrieve the data from the public key-value data store. Each client device uses the shared secret key pair to verify and decrypt the shared data.