Server-Side End-to-End Encryption via Dual-Key Packet Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional messaging solutions do not achieve true end-to-end encryption as servers have access to encrypted messages due to their possession of symmetric keys, compromising message security.
Innovation Solution
A method involving multiple-key encryption where a data packet is encrypted with a first encryption key and identification data encrypted with a second encryption key, ensuring the server cannot decrypt the message by using asymmetric keys for encryption and decryption, allowing true end-to-end encryption communication between computing devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the server uses symmetric key encryption to enable message transmission, then message delivery is achieved, but the server gains access to message content compromising end-to-end encryption
Solution Approach 1:
The patent segments the encryption keys into two distinct types: symmetric keys for efficient message encryption/decryption and asymmetric keys for secure key exchange. The symmetric key is generated and used only by the communicating parties, while the asymmetric key pair enables the server to encrypt data for the target user without being able to decrypt it, thus separating the message delivery function from the message access capability
Solution Approach 2:
The patent introduces an intermediary asymmetric encryption layer between the server and the message content. The server acts as a mediator that can forward encrypted messages without accessing their content, using the recipient's public key to encrypt the symmetric key and the message, thereby enabling the server to facilitate communication while maintaining end-to-end encryption security
2Adaptability or versatility
If the server re-generates and re-encrypts messages with new symmetric keys, then message forwarding is enabled, but the server still accesses encrypted message content
Solution Approach 1:
The patent applies asymmetry by using asymmetric encryption (public-private key pairs) for the server's encryption operations. The server encrypts the symmetric key and message using the recipient's public key, which cannot be decrypted by the server itself (only by the recipient with their private key). This asymmetric approach enables versatile message forwarding while ensuring that the server never accesses the symmetric key or message content
Solution Approach 2:
The patent implements preliminary action by having the client device generate the symmetric key and encrypt the message with it before transmission. The symmetric key is then encrypted with the recipient's public key in advance. This preliminary encryption ensures that when the server forwards the message, it cannot decrypt or access the content, maintaining security while enabling flexible forwarding to multiple recipients
Data Source
AI summary
A method (500) performed by at least one server for processing a data packet from a first computing device to be transmitted to a second computing device is disclosed, in which the data packet includes a message encrypted using a first encryption key to form an encrypted message, identification data of the second computing device encrypted using a second encryption key to form encrypted identification data, and encrypted first and second encryption keys. The method comprises decrypting (504) the encrypted second encryption key; decrypting (506) the encrypted identification data using the decrypted second encryption key; and transmitting (508) the data packet based on the decrypted identification data, wherein the encrypted message and first encryption key are arranged to be undecryptable by the server to permit end-to-end encryption communication between the first and second computing devices. A related system is also disclosed.