Transmittal Token Data Transfer Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional methods for securely transferring data and detecting compromised devices are inadequate, as they fail to prevent unauthorized access and can be hacked, especially when using SSL protocol or when encryption keys are stored on devices.
Innovation Solution
A system that uses transmittal tokens instead of actual data for secure transfer, where a pseudo random bit generator generates and assigns tokens to replace data portions, and a method to detect compromised devices by performing tests and manipulating authentication codes to generate seed values for data modification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional SSL protocol or encryption keys are stored on devices for secure data transfer, then data security is improved, but the system becomes vulnerable to hacking and unauthorized access
Solution Approach 1:
The patent extracts the actual data from the transmission process and replaces it with transmittal tokens. The real data remains stored securely on the server, while only token references are transmitted across the network. This eliminates the vulnerability of transmitting sensitive data over potentially compromised communication channels.
Solution Approach 2:
The patent introduces transmittal tokens as an intermediary between the sender and receiver. These tokens act as safe references that point to the actual data without exposing the data itself during transmission. The tokens can be invalidated and regenerated without affecting the underlying data storage.
2Reliability
If encryption keys are stored on devices for secure transfer, then data protection is improved, but the device complexity and security risk increase
Solution Approach 1:
The system allows the server to self-manage the actual data storage and security. The server generates and maintains the master encryption keys without requiring them to be stored on client devices. Client devices only need to store and transmit relatively simple transmittal tokens, significantly reducing their security management burden.
3Object-affected harmful factors
If transmittal tokens are used instead of actual data, then unauthorized access during transfer is prevented, but the system complexity increases
Solution Approach 1:
The patent segments the data access mechanism into two distinct parts: transmittal tokens for network transmission and actual data for secure storage. This segmentation allows each component to be optimized independently - tokens can be simple strings for easy transmission, while the actual data remains in its secure, encrypted form on the server.
4Reliability
If traditional methods are used to detect compromised devices, then detection capability is limited, but the system remains vulnerable to jailbroken or rooted devices
Solution Approach 1:
The patent performs security tests and generates authentication codes before any data transmission occurs. The system evaluates whether the device is compromised (jailbroken or rooted) in advance and adjusts the security parameters accordingly. This preliminary security assessment ensures that compromised devices cannot access sensitive data regardless of their state.
Data Source
AI summary
According to one example, a system includes a first computing device that determines data for transmittal to a second computing device, and determines transmittal mapping data. The first computing device also breaks the data into one or more portions, and, for each of the one or more portions of the data, the first computing device replaces the respective portion of the data with a transmittal token included in the transmittal mapping data. The first computing device also transmits the transmittal tokens for receipt by the second computing device.