Variable-Length Data Stream Encryption Against Backdoor Interception

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional data communication systems are vulnerable to hackers who can exploit 'backdoors' in local computers or servers to intercept data before or after encryption, highlighting a need for more effective user authentication and access control methods.

Innovation Solution

A method involving a computer that encrypts or decrypts data streams by segmenting values into variable-length words, inserting random values, and using lookup tables to convert messages between different numeral systems, facilitating secure data transmission over external networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of information

If conventional encryption algorithms are used to encrypt data locally at a computer or server, then data confidentiality is improved, but security is worsened because hackers can exploit backdoors to obtain data before or after encryption

Engineering Contradiction:
Improvedata confidentialityVSAvoidsecurity
Core Design Contradiction:
Loss of informationVSReliability

Solution Approach 1:

The patent segments the data stream into multiple smaller data packets before encryption. Each packet is then encrypted separately using conventional algorithms. This segmentation prevents hackers from accessing the complete unencrypted data even if they exploit a backdoor, as they would only obtain fragmented encrypted packets rather than the full data set in readable form.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If data is transmitted over external networks like the Internet, then communication capability is improved, but security is worsened due to exposure to hackers and interception risks

Engineering Contradiction:
Improvecommunication capabilityVSAvoidsecurity
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent applies preliminary action by encrypting and segmenting data before transmission over external networks. The encryption process is performed in advance on the data stream, converting it into an unreadable format before it leaves the local system. This preliminary security measure ensures that even if hackers intercept the data during transmission over the Internet, they cannot access meaningful information without the decryption key.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If direct connection to external networks is implemented, then network accessibility is improved, but security is worsened due to increased vulnerability to hacking attempts

Engineering Contradiction:
Improvenetwork accessibilityVSAvoidvulnerability to hacking
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an intermediary encryption layer between the local system and external networks. The encryption module acts as a mediator that transforms data into an intermediate encrypted state before network transmission. This intermediary process maintains network accessibility while protecting against hacking, as the data passes through this secure transformation layer that prevents direct access to unencrypted information by external attackers.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS10116651B2Technologies for enhancing computer security
Publication Date: 2018.10.30 KARA PARTNERS LLC
  • US10116651B2 patent drawing
  • US10116651B2 patent drawing
  • US10116651B2 patent drawing

AI summary

A method of securely transmitting data comprising (1) obtaining an unencrypted data stream comprising a first sequence of values, (2) segmenting a first portion of the first sequence of values into an original first word having a word-length equal to a first variable, (3) segmenting a second portion of the first sequence of values into an original second word having a word-length equal to a second variable different than the first variable, (4) inserting random values at predetermined locations in the original first and second words to generate modified first and second words, the modified first and second words having a word-length equal to a third variable different than the first and second variables, and (5) combining the modified first and second words into a second sequence of values defining an encrypted data stream.