Synchronized Random Key Authentication for Secure Enterprise Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication systems are insecure due to the practice of call spoofing, where the caller ID can be falsified, leading to unknown and unwanted calls, as relying solely on caller ID for verification is not reliable.
Innovation Solution
An enterprise communication system that uses synchronized random key generators on both the platform and device sides to verify the identity of callers by comparing platform-generated and device-generated synchronized random keys, ensuring secure communication sessions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If caller ID is used for identity verification, then the communication system is simple and easy to operate, but the security and reliability of the communication link deteriorates due to call spoofing
Solution Approach 1:
The patent introduces a call verification code as an intermediary element between the caller ID and the receiving party. This code acts as a mediator that provides additional verification beyond the spoofable caller ID, thereby resolving the contradiction by maintaining operational simplicity while enhancing reliability through the intermediate verification step
Solution Approach 2:
The system performs preliminary verification by generating and transmitting a call verification code before the actual communication takes place. This preliminary action allows the receiving party to verify the caller's identity in advance, preventing unauthorized calls while keeping the overall system easy to operate
2Device complexity
If caller ID alone is used for verification, then the device complexity is low, but the security against call spoofing deteriorates
Solution Approach 1:
The verification process is segmented into two distinct parts: the caller ID (which may be spoofed) and the call verification code (which provides authentic verification). This segmentation allows the system to maintain low device complexity by using existing caller ID infrastructure while adding a separate verification mechanism that effectively counters call spoofing harm
3Reliability
If synchronized random key generators are implemented on both platform and device sides, then the reliability and security of communication link is improved, but the device complexity increases
Solution Approach 1:
The system employs self-service mechanisms where the platform and device independently generate random keys using their own synchronized random key generators. This eliminates the need for complex key distribution infrastructure, as each party autonomously generates and manages its own verification credentials, thereby improving reliability while controlling device complexity
Solution Approach 2:
The synchronized random key generators produce keys at synchronized time intervals or events. This periodic action ensures that both parties have matching verification credentials without requiring complex real-time synchronization protocols, thus enhancing reliability while maintaining reasonable device complexity
Data Source
AI summary
An enterprise communication system adapted for establishing secure wireless communication sessions, the system comprising: an enterprise platform adapted for establishing communications sessions with one or more wireless devices, and for transmitting signals to and receiving signals from the one or more wireless devices; an platform-side automatic synchronized random key generator associated with the enterprise platform for generating platform-generated synchronized random keys; the enterprise platform being adapted to: receive one or more signals representing a request to establish a communication session between the enterprise platform and at least one wireless device; receive a device-generated synchronized random key from the at least one wireless device; compare the device-generated synchronized random key to a platform-generated synchronized random key synchronized to the device-generated synchronized random key; and based on the comparison, output a signal representing a response to authorize or prohibit establishment of the communication session.