Secure Session Setup Using Intermediate Node Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing a secure session between entities on the Internet is crucial for reliable data access and secure information exchange, but existing methods are often slow and insecure, lacking efficient mechanisms for verifying entity authenticity and establishing a shared secret key.
Innovation Solution
A method involving generating random numbers, deriving strings, applying one-way functions, and transmitting encoded strings through an intermediate node to verify entity authenticity and establish a shared secret key for secure data transmission, ensuring that only the entities involved can derive the unique key for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional secure session establishment methods are used, then security can be maintained, but the process is slow and inefficient
Solution Approach 1:
The patent applies preliminary action by pre-generating random numbers and deriving strings before the actual session establishment. The first entity generates a first random number and derives a first string, which is then encoded and transmitted to the intermediate node in advance. This preparation work is done before the session is actually needed, enabling faster session establishment while maintaining security through pre-computed cryptographic materials.
Solution Approach 2:
The patent introduces an intermediate node as a mediator between the first and second entities. This intermediate node receives encoded strings from both parties, verifies them, and facilitates the establishment of the secure session. The intermediary enables efficient verification and key exchange without requiring direct complex interactions between the endpoint entities, thus improving productivity while maintaining reliability.
2Reliability
If secure verification mechanisms are implemented, then entity authenticity can be confirmed, but the process becomes more complex
Solution Approach 1:
The intermediate node serves as a verification mediator that handles the complex authentication logic. Instead of implementing complex verification mechanisms in each endpoint entity, the patent centralizes the verification process in the intermediate node, which receives encoded strings from both entities and performs the verification. This reduces the complexity burden on individual entities while maintaining strong verification capabilities.
Solution Approach 2:
The patent uses encoded strings as cryptographic copies or representations of the random numbers. Rather than transmitting the actual random numbers directly, each entity applies a one-way function to create an encoded version that can be verified without revealing the original secret. This copying approach enables verification while keeping the underlying complexity hidden within the cryptographic functions.
3Reliability
If direct key exchange between entities is performed, then security is compromised, but establishing a shared secret key is necessary for secure communication
Solution Approach 1:
The intermediate node acts as a secure mediator for key establishment. Both entities send their encoded strings to the intermediate node, which verifies them and enables the derivation of a shared secret key. The intermediate node never receives or processes the actual random numbers or the final shared key, ensuring that sensitive information remains confidential while still facilitating secure key establishment among all parties.
Solution Approach 2:
The patent extracts the sensitive cryptographic operations from the communication path between entities. By removing the actual random numbers and shared key from the transmission medium and keeping them confined within the endpoints and intermediate node memory, the system eliminates the risk of interception. Only the non-sensitive encoded strings traverse the communication channel, making the key establishment process secure against eavesdropping.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for setting up a secure session between a first entity and a second entity. In an embodiment, the first entity is a user authentication device and the second entity is an application running on a platform. The method comprises generating a first random number. A user enters a first string, derived from said first number, into the second entity. Further, the method includes applying a one-way function to the first string or to a derivative thereof, obtaining an encoded string. The method also comprises transmitting the encoded string to an intermediate node that is in connection to the first entity and the second entity. Further, the method comprises the step of sharing a second random number with the second entity. The method also comprises a step of deriving a secret key from the first and the second string.