Signcrypted Envelope Message for Secure Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional electronic signature methods face challenges in efficiently protecting data integrity and origin authenticity while maintaining confidentiality, especially in environments with bandwidth limitations and processing constraints, such as mobile devices and internet-centric services.
Innovation Solution
The method involves generating a symmetric content encryption key, encrypting content using this key, and then signcrying the key and its hash using public and private keys to create a signcrypted envelope message, which can be decrypted and verified by recipients for authenticity and integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional digital signature methods are used to protect data integrity and origin authenticity, then security is improved, but processing power and storage requirements increase
Solution Approach 1:
The patent segments the protection mechanism into two parts: (1) asymmetric cryptography is used only to sign a hash of the symmetric key, and (2) symmetric cryptography is used to encrypt the actual message. This segmentation allows the computationally intensive asymmetric operations to be minimized while maintaining security, thus resolving the contradiction between reliability and processing power requirements
Solution Approach 2:
The patent introduces a hash function as an intermediary that transforms the message into a fixed-size digest. This hash serves as a compact representation that can be signed efficiently, reducing the processing burden while maintaining the integrity verification capability. The hash acts as a mediator between the original message and the digital signature operation
2Reliability
If asymmetric key cryptography is used for encrypting large volumes of data, then security is improved, but transmission bandwidth and processing time increase
Solution Approach 1:
The patent merges symmetric and asymmetric cryptography into a hybrid encryption scheme. The symmetric key encryption handles the bulk data efficiently with minimal overhead, while the asymmetric cryptography protects the symmetric key exchange. This combination resolves the contradiction by using each cryptographic method where it is most effective
Solution Approach 2:
The patent creates a compact copy of the essential security information by hashing the message to produce a fixed-size digest. This hash copy is then encrypted with the recipient's public key and transmitted. Instead of encrypting the entire message with asymmetric cryptography, only the compact hash representation is protected this way, significantly reducing transmission volume while maintaining security
3Reliability
If digital signatures are applied to entire messages, then origin authenticity is ensured, but processing time and computational resources increase
Solution Approach 1:
The patent extracts only the essential element for authentication - the hash of the message - and applies the digital signature operation only to this extracted component. By taking out the hash function application, the system maintains origin authenticity verification while avoiding the computational burden of signing the entire message, thus resolving the time-loss contradiction
Data Source
AI summary
Various embodiments relate to a method performed by a processor of a computing system. An example method includes generating a symmetric content encryption key. Content is encrypted using the content encryption key to generate cipher text. A hash of the cipher text is generated. Each of the hash and the content encryption key is signcrypted using each of a signcrypting party public key, a signcrypting party private key and a recipient public key to generate a signcrypted envelope message. The cipher text is embedded in a component of the signcrypted envelope message. The signcrypted envelope message is transmitted to a recipient. The recipient can unsigncrypt the signcrypted envelope message using each of the recipient public key, a recipient private key, and the signcrypting party public key to retrieve the content encryption key and hash of the cipher text. The recipient can decrypt the cipher text using the content encryption key.