Web Data Encryption via Cryptographic Indexing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing HTTPS architecture for data transmission between a browser and a web server significantly increases load and reduces overall performance by approximately 90% due to its cryptographic overhead, making it inefficient for secure data exchange in web applications.
Innovation Solution
A method and system where a browser requests cryptographic information via an HTTPS channel, uses the received algorithm to encrypt data and sends it through an HTTP channel, with the web server obtaining the corresponding decryption algorithm from a cryptographic information providing equipment, thereby reducing the load on the HTTPS channel and enhancing performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the HTTPS channel is used for data transmission between browser and web server, then data security is improved, but system performance deteriorates by approximately 90%
Solution Approach 1:
The patent segments the cryptographic operations from the main data transmission channel. Instead of encrypting all data through HTTPS, only cryptographic information (algorithms and indices) is transmitted via HTTPS, while actual data uses HTTP. This divides the security-critical path from the performance-critical path, resolving the contradiction between security and performance.
Solution Approach 2:
The patent performs cryptographic information acquisition before actual data transmission. The browser obtains cryptographic algorithms and indices through HTTPS in advance, then uses these pre-acquired credentials to encrypt and transmit actual data through HTTP. This preliminary action separates the security establishment phase from the data transmission phase.
2Reliability
If cryptographic operations are performed for each data transmission, then data security is maintained, but system load increases significantly
Solution Approach 1:
The patent uses cryptographic indices as references to actual cryptographic algorithms stored on the server. Instead of transmitting or processing complete cryptographic algorithms for each data transmission, the system transmits compact indices that reference pre-stored algorithms. This copying approach reduces computational overhead and system load while maintaining security.
Solution Approach 2:
The patent changes the parameter being transmitted from complete cryptographic algorithms to compact cryptographic indices. This parameter transformation reduces the amount of data that needs to be processed and transmitted, thereby reducing system load and energy consumption while maintaining the same security level through reference to the actual algorithms.
Data Source
AI summary
This invention provides a method and system for data encryption and decryption in data transmission through the web. The method includes: a browser sends a cryptographic information acquisition request to a cryptographic information providing equipment; the cryptographic information providing equipment sends cryptographic information back to the browser via an HTTPS channel; the cryptographic information includes a cryptographic algorithm and a cryptographic index; the browser uses the cryptographic algorithm to encrypt the data to be transmitted, and sends the encrypted data and the cryptographic index to the web server via an HTTP channel; the web server obtains the cryptographic algorithm corresponding to the cryptographic index from the cryptographic information providing equipment, then decrypts the encrypted data. Embodiments of the present invention can alleviate the load in the HTTPS channel, and improve the overall performance.