Time-Based Communication Data Transformation Against Long-Term Impersonation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication technologies allow malicious third parties to impersonate users over long periods due to the static nature of user parameters and secret keys, compromising security.
Innovation Solution
A communication system that includes a first device and a second device, where the first device generates and transmits transformed data based on a time-specific transformation, and the second device receives and inversely transforms the data using a corresponding inverse transformation, enhancing security by making the data valid only for a limited period.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Duration of action of stationary object
If a user parameter or secret key is generated based on static information (user ID, biometric data), then it enables long-term authentication and identification, but it allows malicious third parties to impersonate users over long periods once they obtain the parameter
Solution Approach 1:
The patent transforms static authentication parameters into dynamic ones by introducing time-based validity periods. User parameters and secret keys are generated with specific validity durations, automatically expiring after a predetermined period. This dynamic approach maintains authentication functionality while limiting the window for potential impersonation attacks, as stolen credentials become invalid after expiration.
Solution Approach 2:
The patent changes the parameter of authentication credentials from permanent to time-limited. By assigning a predetermined validity period to user parameters and secret keys, the system modifies the fundamental characteristic of these credentials. This parameter change enables the system to balance long-term authentication needs with security requirements, as the time-bound nature prevents indefinite misuse of compromised credentials.
2Ease of operation
If transformation data is transmitted over a network, then it enables communication between devices, but it allows malicious third parties to easily acquire the transformation data
Solution Approach 1:
The patent applies preliminary transformation to data before transmission. User parameters and biometric data are transformed into encrypted or encoded forms using predetermined algorithms before being sent over the network. This preliminary action ensures that even if interception occurs, the stolen data remains unusable without the corresponding decryption or transformation keys, which are kept secure on authorized devices only.
3Reliability
If a secret key is used in a public key cryptosystem, then it enables secure communication, but it allows fraud to be committed over a long period once the secret key is obtained
Solution Approach 1:
The patent introduces dynamic time-limited validity to secret keys in public key cryptosystems. Instead of using permanent secret keys, the system generates keys with predetermined expiration periods. This dynamic key management ensures that even if a secret key is compromised, the window for fraudulent activity is limited to the remaining validity period, after which the key automatically expires and must be renewed through secure authentication.
Data Source
AI summary
A communication system, comprising: a first device; and a second device, wherein the first device is configured to: generate first transformed data by subjecting original data to first transformation corresponding to a first period to which a first time point at which the original data is transformed belongs; and transmit the first transformed data to the second device, and wherein the second device is configured to: receive the first transformed data from the first device; and acquire the original data by subjecting the first transformed data to first inverse transformation corresponding to the first period.