Server-Mediated Data Encryption for Resource-Constrained Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for secure data transfer between a sender and a receiver require significant hardware and software resources, especially in scenarios where devices have limited processing capacity and memory, and involve complex encryption and decryption procedures that are costly and resource-intensive.
Innovation Solution
A method where a server generates a transfer-specific encryption key, encrypts data using receiver-specific information, and handles decryption, reducing the need for special software and hardware on the sender and receiver devices by performing encryption and decryption processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex encryption and decryption software is installed on sender and receiver apparatus, then data security is improved, but device complexity and resource requirements increase
Solution Approach 1:
A server is introduced as an intermediary between the sender and receiver to perform encryption and decryption operations. The sender encrypts data with a first key, sends it to the server, which then decrypts it and re-encrypts with a second key before sending to the receiver. This mediator approach allows endpoint devices to use simpler software while maintaining security through centralized cryptographic operations.
Solution Approach 2:
The complex encryption and decryption functionality is extracted from the sender and receiver apparatus and relocated to a dedicated server system. This extraction allows endpoint devices to have minimal cryptographic software while the heavy lifting of secure data transformation is performed remotely by the server with its full cryptographic capabilities.
2Reliability
If secure connection links are established between multiple users, then data security is improved, but hardware and software resource requirements increase
Solution Approach 1:
The server provides a universal encryption/decryption service that can be shared by multiple senders and receivers. Instead of each user pair needing dedicated cryptographic software and hardware resources, a single server instance serves multiple users, reducing overall resource requirements while maintaining security for all connections.
Solution Approach 2:
Multiple secure connection requirements are merged into a single centralized server system. The server consolidates the cryptographic functionality that would otherwise be distributed across multiple user devices, combining hardware and software resources into one location that serves all users, thereby reducing total resource consumption.
3Reliability
If encryption and decryption operations are performed on handheld devices, then data security is improved, but processing power and memory requirements increase
Solution Approach 1:
The server acts as an intermediary that performs computationally intensive encryption and decryption operations remotely. Handheld devices only need to perform lightweight encryption with a first key and decryption with a second key, while the server handles the resource-intensive re-encryption process, effectively offloading processing demands from limited-capacity devices.
Solution Approach 2:
Instead of having endpoint devices perform full encryption and decryption operations, the approach is inverted: devices perform minimal encryption, send data to the server, which then performs the main decryption and re-encryption work. This inversion of the traditional model allows resource-constrained devices to participate in secure communication without needing substantial processing power.
Data Source
AI summary
A method of encrypting and transferring data between a sender and a receiver using a network thereby transferring data in a secure manner includes the steps of a server receiving from the sender an identifier of the receiver; generating a transfer specific encryption key specific to the transfer; encrypting the data using the generated transfer specific encryption key; the server retrieving information specific to the receiver that is accessed according to the identifier of the receiver received from the sender, and using the retrieved information specific to the receiver to encrypt the transfer specific encryption key; transferring the encrypted data and the encrypted transfer specific encryption key over the network for receipt by the receiver; the server receiving from the receiver the encrypted transfer specific encryption key and identifier of the receiver; the server retrieving information specific to the receiver that is accessed according to the identifier of the receiver received from the receiver, and using the retrieved information specific to the receiver to decrypt the encrypted transfer specific encryption key; and decrypting the encrypted data using the decrypted transfer specific encryption key.