Temporary Key Encryption for Lower-Overhead Server Data Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data encryption methods for secure data transmission result in high resource overheads for servers due to the need to maintain key correspondences, which is inefficient and potentially insecure.
Innovation Solution
A data processing method using temporary keys encrypted with a certificate public key, allowing servers to decrypt using a corresponding private key, eliminating the need for key maintenance and reducing server resource overheads while ensuring data security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional data encryption methods are used where the server maintains key correspondences, then data security is ensured, but server resource overhead increases
Solution Approach 1:
The patent extracts the key management burden from the server by implementing asymmetric encryption. The server only needs to provide its public key and receive encrypted data, while the client handles key generation and data encryption. This removes the complex key correspondence maintenance from the server side.
Solution Approach 2:
Instead of the server actively managing and distributing keys to multiple clients (traditional approach), the patent inverts the approach by having each client independently encrypt data using the server's public key. The server passively receives only encrypted data without needing to track or manage individual client keys.
2Ease of operation
If the server maintains correspondence between negotiated keys and applications, then data can be decrypted and processed, but processing time and resource consumption increase
Solution Approach 1:
The server's public key is pre-configured in the system, eliminating the need for real-time key negotiation and correspondence setup. Clients can immediately encrypt data using this pre-available public key without requiring the server to perform time-consuming key management operations.
Solution Approach 2:
Each client independently performs data encryption using the server's public key before transmission. This self-service encryption approach eliminates the need for the server to actively participate in key management or maintain key correspondences, significantly reducing server processing time.
3Reliability
If multiple clients connect to the server with different keys, then individual data security is maintained, but server complexity and key management overhead increase
Solution Approach 1:
The server's public key serves a universal function for all clients. Instead of maintaining separate key pairs for each client, the server has one public key that any client can use to encrypt data. This universal approach maintains individual data security while eliminating complex key management overhead.
Solution Approach 2:
The public key acts as an intermediary that enables secure communication between multiple clients and the server without requiring direct key correspondence. Each client uses the public key as a mediator to encrypt data, and the server uses its private key to decrypt, eliminating the need for the server to manage individual client keys.
Data Source
AI summary
In a method of data processing, when a service request is initiated by an application running on a terminal device, a temporary key is allocated to the service request. The temporary key is encrypted by using a certificate public key, to obtain an encrypted temporary key, the certificate public key is preset in a source code of the application, and a certificate private key associated with the certificate public key is stored in a server for the application. Request data of the service request is encrypted by using the temporary key, to obtain at least a ciphertext. A network response request packet is generated based on the encrypted temporary key and the ciphertext. The network response request packet is transmitted to the server, the network response request packet requests the server to respond to the service request. Apparatus and non-transitory computer-readable storage medium counterpart embodiments are also contemplated.