Transactional Cryptography Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption methods, such as Public Key Infrastructure (PKI), are vulnerable to key reverse engineering due to publicly stored keys, compromising the security of data in transit and stored data, especially when using QR codes for sensitive transactions.
Innovation Solution
Transactional Cryptography (TC) employs multiple layers of encryption and Discreet Key Exchange methodology to generate unique, one-time asymmetrical key-pairs for each communication transaction, ensuring that encryption keys are not publicly stored and are discarded after use, using a trusted third-party repository for key distribution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Public Key Infrastructure (PKI) is used for encryption, then data can be secured through public key availability, but security is compromised due to vulnerability of key reverse engineering
Solution Approach 1:
The system performs preliminary key generation and establishes secure key pairs before actual data transmission occurs. Encryption keys are generated in advance and stored securely, while decryption keys are never exposed publicly, preventing reverse engineering before it can happen.
Solution Approach 2:
The invention extracts and removes the vulnerable public key storage component from the system. Instead of storing encryption keys publicly as in traditional PKI, the system only stores decryption keys privately on user devices, eliminating the attack surface for key reverse engineering while maintaining encryption capability.
2Ease of operation
If encryption keys are publicly stored for easy access, then communication security is enabled, but key security is weakened exposing the system to attacks
Solution Approach 1:
The invention introduces an intermediary trusted third-party repository that facilitates key distribution without requiring public key storage. The repository acts as a secure mediator that provides decryption keys to authorized users through verified requests, enabling easy key access while maintaining security through private key management.
Solution Approach 2:
The system inverts the traditional PKI model by storing decryption keys privately rather than encryption keys publicly. This inversion maintains ease of operation through the trusted repository while fundamentally improving key security by eliminating public key exposure.
3Device complexity
If the same key-pair is reused for multiple transactions, then system complexity is reduced, but security is compromised due to key interception risk
Solution Approach 1:
The system implements dynamic key management where decryption keys are generated specifically for each transaction or communication session. Keys are created on-demand, used immediately for the specific transaction, and then discarded, ensuring that even if one key is compromised, other transactions remain secure.
Solution Approach 2:
The invention treats encryption keys as disposable, short-lived objects rather than permanent assets. Each transaction receives a unique decryption key that is discarded after use, eliminating the risk associated with key reuse while keeping the system simple through automated key lifecycle management.
Data Source
AI summary
A blockchain-based record of transactions taking place through a smartphone or other electronic/peripheral device. The blockchain record itself contains mathematical hashes, including encryption if desired, based on the various data components of a smartphone or other device, which creates a distributed ledger system that is extremely difficult to break into to add, delete, or alter individual transactions after the fact.