Symmetric Encryption Key Generation via Shared Secret Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Public key encryption is vulnerable to man-in-the-middle attacks as it lacks authentication of the second party, and requires an initial exchange of public keys before encrypted communications can begin, which can be insecure.

Innovation Solution

A system and method using public key encryption that generates a shared secret between two computing devices to derive a session key, reducing the risk of man-in-the-middle attacks by allowing one party to encrypt messages before communication starts, and utilizing this shared secret to authenticate and generate keys for secure symmetric encryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If public key encryption is used without authentication, then encryption capability is provided, but vulnerability to man-in-the-middle attacks increases

Engineering Contradiction:

ImprovesecurityVSAvoidman-in-the-middle attacks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent performs preliminary authentication actions by establishing a shared secret between parties before actual message encryption occurs. This preliminary shared secret is used to authenticate public keys and prevent man-in-the-middle attacks, ensuring that the encryption infrastructure is secure before messages are exchanged.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If initial public key exchange is required before encryption, then secure communication is enabled, but communication delay increases

Engineering Contradiction:

Improvesecure communicationVSAvoidkey exchange time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

Inventive Principle:

Principle #10Preliminary action

3Productivity

If symmetric encryption with session key is used, then encryption efficiency is improved, but key distribution security deteriorates

Engineering Contradiction:

Improveencryption efficiencyVSAvoidkey distribution security

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent introduces a shared secret as an intermediary element that enables secure key derivation without direct key exchange. Each party independently derives the session key from their private key and the shared secret, eliminating the need for insecure key distribution while maintaining symmetric encryption efficiency.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS10397206B2Symmetric encryption key generation/distribution

Publication Date: 2019.08.27 RED HAT INC

AI summary

Various examples are directed to systems and methods for exchanging encrypted information. A first computing device may select a first private key and generate a session key based at least in part on the first private key. The first computing device may receive from a second computing device a second public key and generate a first public key based at least in part on: the second public key, a shared secret integer, and the first private key. A second computing device may select a second private key and generate the second public key based at least in part on the second private key; a generator, a first group constant and the shared secret integer.