Cryptographic Key Exchange via Visual Code Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for expanding trust from a trusted device to an unauthenticated device in cryptography are inefficient, often relying on insecure channels or physical transfer methods, which are impractical or vulnerable to eavesdropping and man-in-the-middle attacks.
Innovation Solution
A method and system for exchanging a cryptographic key between a trusted and untrusted device using a visual code, where a secret value is generated, and a message is transmitted to the untrusted device to create a key, with a visual code displayed and captured to secure the connection, relying on the security of the visual channel and cryptographic assumptions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If key exchange is performed over an insecure channel (Internet), then communication between devices is enabled, but the key is vulnerable to eavesdropping and man-in-the-middle attacks
Solution Approach 1:
The patent introduces a visual channel (display screen and camera) as an intermediary for key exchange. Instead of directly exchanging keys over the insecure network channel, the system uses a visual display (QR code or similar visual representation) that encodes key material, which is then captured by a camera. This visual intermediary prevents direct network-based eavesdropping while still enabling key exchange between devices.
2Reliability
If physical transfer methods (floppy disk, flash drive) are used for key exchange, then security against network attacks is improved, but the process becomes difficult or impossible to handle due to different connection standards
Solution Approach 1:
The patent replaces the mechanical/physical transfer system (floppy disks, flash drives requiring physical connection) with an optical system. Instead of using physical storage media that require compatible connection standards, the system uses visual displays and camera capture to transfer key material wirelessly through light, eliminating the need for physical connectors while maintaining security.
3Reliability
If traditional key exchange protocols are used, then key exchange can be performed, but multiple message exchanges and user interactions are required, reducing efficiency
Solution Approach 1:
The patent performs preliminary encoding of key material into a visual format (such as a QR code containing encoded key data) before the actual key exchange occurs. This preliminary action consolidates multiple pieces of information into a single visual representation, allowing the receiving device to capture all necessary key material in one action rather than requiring multiple back-and-forth message exchanges.
Data Source
AI summary
The present teaching relates to exchanging a key with a device. In one example, a secret value is generated. A message is transmitted to the device. The message includes information related to the secret value based on which the device is to create a cryptographic key. A visual code displayed on the device is captured. The visual code includes a first piece of information and a second piece of information. A key value is generated based on the first piece of information and the secret value. A test value is calculated based on the key value. It is determined whether the device is securely connected based on the test value.