Terminal Device Local Encryption for IM Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current enterprise instant messaging (IM) systems rely on third-party service providers for encryption, which may compromise message security as unauthorized access can decrypt messages even if login information is stolen, and lack flexibility in encryption methods.
Innovation Solution
Implementing a message encryption and decryption method within terminal devices using a cryptographic service provider (CSP) integrated with a Crypto API, where encryption and decryption routines and keys are managed locally, ensuring only authorized terminals can access encrypted messages by using specific encryption/decryption routines and keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If third-party service providers are used for message encryption, then message transmission can be achieved, but message security is compromised because unauthorized access can decrypt messages even with stolen login information
Solution Approach 1:
The patent extracts the encryption and decryption functionality from the third-party service provider and relocates it to the terminal devices themselves. By implementing local encryption routines and key management on user devices, the system eliminates the security vulnerability where centralized providers could potentially access or be compromised, thereby resolving the contradiction between achieving message transmission and preventing unauthorized access.
Solution Approach 2:
The patent introduces an enterprise server as a mediator that distributes encryption routines and keys to terminal devices without centralizing the actual encryption process. This intermediary approach allows secure message transmission while maintaining distributed security control, preventing both third-party providers and unauthorized entities from accessing encrypted messages.
2Ease of operation
If third-party service providers manage encryption, then encryption process can be simplified, but flexibility in encryption methods is reduced
Solution Approach 1:
The patent segments the encryption system into distributed components on multiple terminal devices, each capable of independently selecting and applying different encryption routines. This segmentation allows each device to have flexibility in choosing encryption methods while maintaining overall system simplicity through standardized interfaces and automated key management.
Solution Approach 2:
The patent implements dynamic encryption where terminal devices can adaptively select different encryption routines and keys based on message types, recipients, or security requirements. This dynamic approach provides flexibility in encryption methods while keeping the operation simple through automated selection and management of encryption parameters.
Data Source
AI summary
A method of encrypted communication by a terminal device is described. An encryption request for a message is obtained by processing circuity of the terminal device. The encryption request includes an identifier of an encryption routine and an encryption key. The encryption routine is identified according to the identifier of the encryption routine included in the encryption request. An encrypted message is generated by the processing circuity of the terminal device by encrypting the message using the identified encryption routine and the encryption key included in the encryption request. Moreover, a data packet is generated by the processing circuity of the terminal device by performing a packet assembly process on the encrypted message. The data packet is sent to another device via a network.