XOR Keystream Encryption for Fast Point-to-Point Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods can be breached with sufficient tools and time, and there is a need for quicker and less cumbersome point-to-point encryption that is more secure against third-party decryption.
Innovation Solution
Utilizing an exclusive OR gate (Ex-OR gate) for point-to-point encryption and decryption, where a catalogued random data feed is input at both the encryption and decryption sides, with encrypted data transmitted through a visible medium, and decrypted using a synchronized random data feed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional encryption algorithms are used, then data security is provided, but the encryption can be breached given sufficient tools and time
Solution Approach 1:
The patent applies dynamics by using a moving target approach where the encryption key changes continuously based on a pseudo-random sequence generated from a seed. The key stream is dynamically updated with each bit of data encrypted, making the encryption state changeable and adaptive rather than static, thus preventing brute-force attacks and making breach time practically infinite.
Solution Approach 2:
The patent changes the parameter of using a conventional fixed key to a variable key stream generated by a pseudo-random number generator. The key stream is continuously changed based on the seed and data being encrypted, transforming the encryption from a static parameter system to a dynamic one that adapts to each encryption operation, thereby eliminating predictable patterns that could be exploited for breaching.
2Reliability
If conventional encryption methods are used, then data protection is achieved, but the decryption process is cumbersome and time-consuming
Solution Approach 1:
The patent implements self-service by using a symmetric key stream generation where the same pseudo-random number generator and seed used for encryption are also used for decryption. The decryption process automatically retrieves the identical key stream from the seed, eliminating the need for complex key management and manual key entry, thus making decryption as easy as the encryption process itself.
Solution Approach 2:
The patent applies universality by using a single seed-based pseudo-random number generator that serves dual purposes: generating the encryption key stream and generating the decryption key stream. This multi-functional approach eliminates the need for separate encryption and decryption key systems, simplifying the overall operation and making the system easier to use while maintaining security.
3Reliability
If robust encryption is implemented, then security against third-party decryption is improved, but the encryption and decryption process becomes more complex
Solution Approach 1:
The patent extracts the complex key generation and management functions from the encryption/decryption process by using a simple seed value that triggers a pseudo-random number generator. The complex key stream is extracted and generated automatically from the simple seed, separating the complexity of secure key generation from the simplicity of the user interface, thus maintaining security while reducing operational complexity.
Solution Approach 2:
The patent introduces a pseudo-random number generator as an intermediary between the simple seed and the complex key stream. This intermediary component handles the complexity of generating secure, variable-length key streams from a simple seed, abstracting the complexity away from the user while maintaining robust security. The intermediary automatically manages the key generation without requiring user intervention or complex configuration.
Data Source
AI summary
A point-to-point encryption and decryption system is provided. The system includes an exclusive OR gate located at the encryption side and a second exclusive OR gate at the decryption side. The system also includes a catalogued random data store feeding into the first input of the exclusive OR gate and a second catalogued random data store for feeding the second exclusive OR gate and a visible medium. The exclusive OR gate receives a stream of unencrypted data and the exclusive OR gate forms a stream of encrypted data at the output of the exclusive OR gate based on the unencrypted data and the catalogued random data store. The exclusive OR gate transmits, via the visible medium, the stream of encrypted data to the second exclusive OR and the second exclusive OR gate receives the stream of encrypted data and, in response thereto, outputs a stream of unencrypted data.