Transient Encryption Key Generation for Secure Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional data transfer methods, such as those using the SSL protocol, are inadequate as they can be susceptible to hacking, and stored encryption keys can be compromised, allowing unauthorized access to transmitted data.
Innovation Solution
A system and method where a first computing device generates an encryption key, encrypts data, and transmits it to a second device without sending the key, and the second device generates a matching key to decrypt the data, ensuring the key is not stored and is only used transiently, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional SSL protocol is used for data transfer, then data transmission can be achieved, but security is compromised due to susceptibility to hacking and stored encryption key compromise
Solution Approach 1:
The patent extracts the encryption key from the data transmission process entirely. Instead of transmitting keys through SSL protocols or storing them on devices, the system generates encryption keys locally at each endpoint and never transmits or stores them, eliminating the key compromise vulnerability while maintaining encrypted data transmission
Solution Approach 2:
The patent introduces a pseudo-random key generation algorithm as an intermediary mechanism. This algorithm uses seed values and transformation functions to generate matching encryption keys at both transmitting and receiving devices without direct key transmission, serving as a mediator that enables secure communication without exposing keys
2Reliability
If encryption keys are stored on devices for data encryption, then data can be encrypted and decrypted, but the stored keys become vulnerable to compromise and unauthorized access
Solution Approach 1:
The patent implements disposable encryption keys that are generated transiently in memory and never written to persistent storage. These keys exist only temporarily during the encryption/decryption process and are then discarded, eliminating the long-term storage vulnerability while maintaining encryption functionality
Solution Approach 2:
The patent changes the state of encryption keys from persistent stored values to transient in-memory values. By altering the lifecycle parameter of keys from long-term storage to short-term existence, the system maintains encryption capability while eliminating the security risk associated with stored keys
3Reliability
If encryption keys are transmitted securely, then data can be encrypted during transmission, but the key transmission process itself becomes a security vulnerability
Solution Approach 1:
The patent implements self-service key generation where each device independently generates its own encryption keys using local pseudo-random algorithms and seed values. The transmitting device generates keys for encryption and the receiving device generates matching keys for decryption, eliminating the need for key transmission and simplifying key management
Data Source
AI summary
According to one example, a system includes a second computing device that has one or more processors configured to receive encrypted data from a first computing device, the encrypted data being encrypted based on a first encryption key. The one or more processors are further configured to generate a second encryption key that matches the first encryption key, decrypt the encrypted data using the second encryption key, and transmit the data for use.