Third-Party Secure Channel Establishment via Cryptographic Hopping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure communication protocols, such as TLS, often involve plaintext communications that can reveal information about the secure channel, making it easier for attackers to exploit known weaknesses in cryptographic implementations, especially in complex network configurations where access to multiple parties is required.
Innovation Solution
The solution involves a third-party system that facilitates the establishment of a new secure channel by providing security parameters to both the client and server, reducing the risk of plaintext information exposure by requiring attackers to access communications with the third party as well as the client-server pair, and employs a cryptography algorithm hopping model to switch between cryptographic algorithms over time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TLS protocols use plaintext communications to establish secure channels, then the channel establishment process is simplified and faster, but security is compromised because plaintext information reveals details about the secure channel
Solution Approach 1:
The patent introduces a third-party system as an intermediary that generates and provides security parameters to both the client and server. This mediator enables the establishment of secure channels without requiring plaintext communication of cryptographic parameters between the client and server, thus maintaining security while simplifying the protocol complexity.
Solution Approach 2:
The third-party system performs preliminary actions by pre-generating and storing security parameters before the actual secure channel establishment between client and server. This preliminary preparation allows the client and server to establish secure channels using pre-computed parameters without exposing plaintext cryptographic information during their direct communication.
2Reliability
If cryptographic algorithms remain static over time, then implementation is simpler and more predictable, but security weakens as cryptographic weaknesses are discovered
Solution Approach 1:
The patent implements dynamic cryptography by enabling the client and server to switch between different cryptographic algorithms over time based on a hopping model. This dynamic approach allows the system to adapt to newly discovered cryptographic weaknesses by changing algorithms, while the third-party system manages the complexity of coordinating these changes.
Solution Approach 2:
The system changes cryptographic parameters dynamically by switching between different algorithms in a sequence determined by a hopping model. The third-party system provides updated security parameters that enable the client and server to transition between cryptographic algorithms, maintaining security without requiring complex local decision-making about when and how to change algorithms.
Data Source
AI summary
A secure channel is generated using a third party to the channel. A first secure channel between two computer systems is established. The first secure channel is used to relay information about a third party. The third party provides security parameters for a second secure channel to enable the two computer systems to communicate over a second secure channel.