SSL Encryption Bandwidth Reduction via Data Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
SSL and TLS encryption protocols consume significant processor resources, particularly in lightweight mobile devices and IoT devices, due to computationally intense handshakes and resource-intensive secure communication requirements.
Innovation Solution
Implementing a system that dynamically opens multiple channels between the client and server, using both secured (SSL/TLS) and non-secured channels, where sensitive information is transmitted via secure channels marked by tags, and non-sensitive information is sent over unsecured channels, reducing the computational load by minimizing data transmission through secure channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SSL/TLS encryption is used for all data transmission, then data security is improved, but processor resource consumption increases
Solution Approach 1:
The patent segments data into sensitive and non-sensitive categories, applying different transmission channels accordingly. Sensitive data is transmitted through SSL/TLS encrypted channels while non-sensitive data uses unencrypted channels, thus maintaining security where needed while reducing overall processing overhead.
Solution Approach 2:
The patent implements local quality by applying encryption selectively to specific data elements rather than uniformly to all data. HTML tags mark specific sensitive elements for encryption, allowing the system to optimize security resources locally where they are most needed.
2Reliability
If SSL/TLS handshake protocol is implemented, then secure communication is established, but computational intensity increases
Solution Approach 1:
The patent applies partial action by implementing SSL/TLS handshakes only for sensitive data transmission rather than for all communication. This reduces the frequency and total computational burden of establishing secure sessions while maintaining security for critical information.
3Reliability
If all data is transmitted through secure channels, then data protection is improved, but bandwidth efficiency decreases
Solution Approach 1:
The patent segments the communication stream into encrypted and unencrypted portions based on data sensitivity. This allows bandwidth to be used more efficiently by avoiding encryption overhead for non-sensitive data while maintaining protection for sensitive information.
Data Source
AI summary
Systems and methods provide for a solution for encryption by dynamically opening multiple channels between the client and the server, where the channels include both secured (e.g., SSL/TLS and etc.) channels and non-secured channels. Non-sensitive information can be over non-secured channels, and sensitive information can be sent via the secured channels. The system can recognize whether the information is sensitive or not via the use of tags on a page or frame that delineate which information is sensitive. For instance, on a form, tags can mark off the areas of the form that may contain sensitive information, such as social security numbers, names, addresses, financial information, and other private information. All the data within the tags can be considered sensitive and so be communicated to the server via a secure channel while other data can be transmitted through unsecured channels.