Two-Way Handshake for Secure Key Establishment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encrypted telecommunication sessions face challenges in updating encryption keys during a session, leading to issues like jitter, lost communications, and unauthorized participants due to delayed or missed key transmissions.
Innovation Solution
A two-way handshake process is established to generate and update symmetric encryption keys for secure communication sessions, ensuring that both devices derive transmission and receiving keys, which are synchronized and updated in real-time to maintain secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption keys are transmitted during a telecommunication session, then secure communication is enabled, but key delay or loss occurs causing jitter and lost communications
Solution Approach 1:
The patent performs preliminary key establishment actions before the actual communication session begins. The initiator device generates and shares encryption keys with participant devices in advance, storing them locally. This preliminary key distribution eliminates the need for real-time key transmission during the session, preventing jitter and communication loss while maintaining security.
2Reliability
If encryption keys are updated during a telecommunication session, then security is maintained, but key updates may be delayed or missed allowing unauthorized access
Solution Approach 1:
The system performs preliminary key establishment before the session starts, and implements a key caching mechanism where devices store encryption keys locally. During the session, devices use pre-stored keys for immediate encryption/decryption without waiting for updates. Key updates are handled asynchronously in the background, ensuring continuous security without interruption or delay in the communication flow.
3Reliability
If keys are synchronized between devices, then secure communication is maintained, but synchronization failures result in lost communications
Solution Approach 1:
The patent segments the key management process into independent components: key generation by the initiator, key distribution to participants, and local key storage on each device. Each device maintains its own key copy independently, eliminating the need for continuous synchronization during the session. This segmentation ensures that communication reliability is not affected by synchronization failures.
4Reliability
If a two-way handshake process is implemented for key establishment, then key synchronization is improved, but the process complexity increases
Solution Approach 1:
The two-way handshake is performed as a preliminary action during the session initiation phase, not during ongoing communication. The initiator sends a key establishment request, the participant responds with acknowledgment, and both devices store keys locally. This preliminary completion of the handshake simplifies the ongoing communication process, as devices can immediately use stored keys without repeated synchronization handshakes.
Data Source
AI summary
The present application describes a method, system, and non-transitory computer-readable medium for end-to-end encryption during a secure communication session. According to the present disclosure, a first device initializes a secure communication session with at least one second device. Initializing the secure communication session includes transmitting an invitation to a secure communication session to the at least one second device. The at least one second device may generate a transmission root key, which may be used to derive a first key for encrypting data transmitted to the first device and a second key for decrypting received data from the first device. The at least one second device may transmit the transmission root key to the first device, which may use the transmission root key to derive a first key to encrypt data transmitted to the at least one second device and a second key to decrypt data received from the at least one second device.