Secure Text Messaging via Cryptographic Module and Volatile Memory
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current secure text message exchange systems provide end-to-end encryption during transmission but lack protection against cyber-attacks on end devices, where messages can be accessed in plain text format.
Innovation Solution
A system and method for secure text message exchange between end devices, incorporating a cryptographic module, CPU with ROM/WPM-based code memory, and volatile memory storage for encryption keys and messages, ensuring protection against attacks by generating new encryption keys for each session and permanently deleting session data upon completion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If end-to-end encryption is implemented for message transmission, then message security during transmission is improved, but message security on the end device deteriorates because messages can be accessed in plain text format on the device
Solution Approach 1:
The system segments the security protection into two distinct phases: transmission security (end-to-end encryption) and storage security (cryptographic protection on end device). The cryptographic module on the end device creates a secure enclave that segments the message storage from the main device memory, ensuring that even if the device is compromised, the messages remain protected through separate security layers.
Solution Approach 2:
The patent introduces a cryptographic module as an intermediary between the message storage and the device filesystem. This intermediary layer encrypts messages before storing them in volatile memory, acting as a mediator that prevents direct access to plain text messages even when the device is penetrated, while still allowing authorized reading during the communication session.
2Reliability
If protection against end device penetration is implemented through complex security measures, then message security on the device is improved, but device complexity increases making it difficult to provide sufficient long-lasting protection
Solution Approach 1:
The patent extracts the cryptographic functionality into a dedicated cryptographic module that operates independently from the main device architecture. By taking out the encryption/decryption operations as a separate module with dedicated hardware resources, the system provides strong security without requiring the entire device architecture to be complex. The module can be added to existing devices without redesigning the core device architecture.
Solution Approach 2:
The system uses volatile memory for storing encrypted messages and session keys, which are automatically erased when power is lost or the session ends. This approach uses inexpensive, temporary storage rather than complex persistent secure storage solutions. The security relies on the transient nature of volatile memory combined with encryption, providing adequate protection without requiring expensive or complex long-term storage security mechanisms.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention provides systems, devices and methods for secure exchange of text messages between two or more end devices, wherein the messages are protected along their transmission path and while they are on the end device.