Secured Data Transaction by Using ECC Based on Cryptography

Abstract

Security and privacy in digital communication have become major concerns in modern network systems, affecting confidentiality and data integrity. This project develops a secure data transmission system using a Hybrid Cryptographic Algorithm that combines Machine Learning-inspired security concepts with advanced cryptographic techniques. Elliptic Curve Cryptography (ECC) is used for secure key exchange, RSA is applied for authentication through digital signatures, and AES-256-GCM is used for fast and secure message encryption. The system enables users to securely register, login, send encrypted messages, and decrypt received messages through a web-based platform. Additionally, automatic message expiry functionality is implemented to enhance privacy and prevent unauthorized access after viewing. The platform also provides secure session handling and database management using PHP, MySQL, and OpenSSL libraries for efficient and reliable communication between users.

Introduction

Secure data transmission is essential for protecting confidentiality, integrity, and privacy in modern communication systems. This project proposes a hybrid cryptographic secure communication system that combines Elliptic Curve Cryptography (ECC), RSA, and AES-256-GCM to provide secure and reliable message exchange. ECC is used for secure key exchange, RSA for authentication and digital signature verification, and AES-256-GCM for efficient message encryption and decryption. The system also includes secure user authentication, role-based communication, automatic message expiry after viewing, and database management using PHP and MySQL, ensuring protection against unauthorized access and cyber threats.

The literature review highlights that hybrid cryptographic approaches provide stronger security than individual encryption algorithms. Previous research demonstrates the efficiency of ECC for key exchange, RSA for authentication and digital signatures, and AES-256-GCM for fast, secure encryption with data integrity. Modern secure messaging systems also emphasize features such as encrypted message storage, secure authentication, automatic message expiration, and database security, forming the basis for reliable real-time communication.

Developing such a system presents several challenges, including secure cryptographic key generation and management, efficient integration of symmetric and asymmetric encryption, and maintaining confidentiality, integrity, and authentication throughout communication. Additional challenges involve integrating encryption, authentication, secure databases, session management, and message expiry into a user-friendly web application while ensuring scalability, compatibility with PHP, MySQL, and OpenSSL, and protection against evolving cyber threats.

The proposed methodology implements a hybrid cryptographic framework where ECC securely exchanges encryption keys, RSA verifies digital signatures and authenticates users, and AES-256-GCM encrypts and decrypts message content. The system also supports user registration, secure login, sender-receiver communication, secure session handling, and automatic message deletion after viewing. All encrypted messages, user information, timestamps, and message status are securely stored in a MySQL database and managed through a PHP-based web application.

The system architecture integrates a responsive web interface with cryptographic modules. The frontend, developed using HTML, CSS, Bootstrap, and JavaScript, provides interfaces for registration, login, message sending, and message receiving. The backend, built with PHP, handles authentication, encryption, decryption, routing, session management, and communication between components. OpenSSL libraries implement the cryptographic algorithms, while MySQL securely stores encrypted data and user information, enabling secure, real-time communication with confidentiality, integrity, authentication, and automatic message expiry.

The project employs several key technologies, including ECC for secure key exchange, RSA for authentication and digital signatures, AES-256-GCM for message encryption, OpenSSL for cryptographic operations, PHP for backend development, MySQL for secure data storage, PHP session management for authentication, and the XAMPP server environment for deployment and testing.

The implemented system provides a secure and user-friendly web interface consisting of registration, login, dashboard, sender, and receiver modules. Users can register securely, authenticate through encrypted credentials, send encrypted messages, receive decrypted messages, and manage secure communication sessions through a centralized dashboard. Overall, the proposed hybrid cryptographic communication system delivers a practical, scalable, and efficient solution for secure real-time message transmission while ensuring confidentiality, authentication, integrity, and privacy.

Conclusion

In conclusion, the Secure Data Transmission System provides an intelligent and reliable solution for protecting sensitive information using Hybrid Cryptographic techniques. The system combines Elliptic Curve Cryptography (ECC), RSA, and AES-256-GCM algorithms to ensure secure communication, confidentiality, authentication, and data integrity during message transmission. By implementing secure key exchange, digital signature verification, message encryption, and automatic message expiry functionalities, the application helps prevent unauthorized access and enhances user privacy. The web-based interface makes secure communication simple and efficient for users, while the integration of PHP, MySQL, and OpenSSL ensures reliable system performance. Overall, the project supports secure real-time communication and strengthens data protection through advanced cryptographic mechanisms.

References

[1] V. Miller, “Use of Elliptic Curves in Cryptography,” Advances in Cryptology – CRYPTO ’85, Springer, 1986. [2] N. Koblitz, “Elliptic Curve Cryptosystems,” Mathematics of Computation, Vol. 48, No. 177, pp. 203–209, 1987. [3] R. Rivest, A. Shamir, and L. Adleman, “A Method for Obtaining Digital Signatures and Public-Key Cryptosystems,” Communications of the ACM, Vol. 21, No. 2, pp. 120–126, 1978. [4] J. Daemen and V. Rijmen, The Design of Rijndael: AES – The Advanced Encryption Standard, Springer, 2002. [5] National Institute of Standards and Technology (NIST), “Advanced Encryption Standard (AES),” FIPS PUB 197, 2001. [6] W. Stallings, Cryptography and Network Security: Principles and Practice, 7th Edition, Pearson Education, 2017. [7] Behrouz A. Forouzan, Cryptography and Network Security, McGraw-Hill Education, 2015. [8] William Stallings, Network Security Essentials: Applications and Standards, Pearson, 2018. [9] OpenSSL Software Foundation, “OpenSSL Cryptography Library Documentation,” Available: https://www.openssl.org/ [10] The PHP Group, “PHP: Hypertext Preprocessor Documentation,” Available: https://www.php.net/ [11] Oracle Corporation, “MySQL Database Reference Manual,” Available: https://dev.mysql.com/doc/ [12] A. Menezes, P. van Oorschot, and S. Vanstone, Handbook of Applied Cryptography, CRC Press, 1996. [13] D. R. Stinson, Cryptography: Theory and Practice, CRC Press, 2005. [14] Christof Paar and Jan Pelzl, Understanding Cryptography: A Textbook for Students and Practitioners, Springer, 2010. [15] Bruce Schneier, Applied Cryptography: Protocols, Algorithms, and Source Code in C, Wiley India, 2015.

Copyright

Copyright © 2026 R. Lalitha , P. Bindhu Priya . This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.