Secure Parameter Transmission via Visual Signals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securely transmitting security parameters between computing devices, such as public keys, often require manual verification or a large public key infrastructure, and are vulnerable to tampering in wireless communications.
Innovation Solution
A method involving the transmission of a password as an image or audio signal between devices in close proximity, followed by a key exchange using a protocol like SPEKE, allowing secure derivation and use of encryption keys for authenticating and encrypting security parameters.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual verification of security parameters is implemented, then security and authenticity are improved, but ease of operation deteriorates due to user burden
Solution Approach 1:
The patent introduces an intermediary device (such as a camera or display) that captures and transmits security parameters in visual form (e.g., QR codes, barcodes, or visual representations of cryptographic keys). This intermediary mechanism allows automatic verification without requiring users to manually check and confirm security parameters, thus maintaining high security while significantly improving ease of operation.
2Reliability
If public key infrastructure is used, then security and authenticity are improved, but device complexity deteriorates due to infrastructure requirements
Solution Approach 1:
The patent extracts the essential security verification function from the complex public key infrastructure and implements it through a simplified visual transmission mechanism. By taking out only the necessary element (visual representation of security parameters) and removing the heavy infrastructure overhead, the system achieves comparable security with minimal device complexity and no external infrastructure dependencies.
Solution Approach 2:
The patent employs disposable, easily generated visual security parameters (such as one-time QR codes or barcodes) that are created, transmitted, and discarded in a single use. These cheap, short-living visual objects replace expensive, complex cryptographic infrastructure while providing sufficient security for the transaction, thereby reducing device complexity significantly.
3Ease of operation
If visual transmission of security parameters is implemented, then ease of operation is improved, but vulnerability to tampering worsens in wireless communication
Solution Approach 1:
The patent applies preliminary anti-action by embedding cryptographic authentication mechanisms within the visual transmission process. Before the visual security parameters are transmitted, cryptographic signatures or hashes are pre-computed and embedded in the visual representation. This preliminary security measure prevents tampering during transmission, as any modification to the visual parameters would invalidate the embedded cryptographic verification, thus counteracting the vulnerability to tampering while maintaining ease of operation.
Data Source
Figure 1
Figure 2
Figure 3A
AI summary
Embodiments of the systems, devices, and methods described herein generally facilitate the secure transmittal of security parameters. In accordance with at least one embodiment, a representation of first data comprising a password is generated (705) at the first computing device as an image or audio signal (710). The image or audio signal is transmitted (715) from the first computing device to the second computing device. The password is determined from the image or audio signal at the second computing device (725). A key exchange (730,740) is performed between the first computing device and the second computing device wherein a key (736,748) is derived at each of the first and second computing devices. In at least one embodiment, one or more security parameters (e.g. one or more public keys) are exchanged (744,750) between the first and second computing devices, and techniques for securing the exchange of security parameters or authenticating exchanged security parameters are generally disclosed herein.