AKMA Application Key Refresh With Count-Based A-KID
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems face challenges in efficiently refreshing application keys (KAF) without requiring a full primary authentication process, leading to potential security vulnerabilities.
Innovation Solution
Implementing an enhanced key identifier (A-KID) that includes a count value, allowing for periodic refresh of application keys (KAF) without updating the anchor key (KAKMA), using a key derivation function to encrypt and update the count value, and incorporating a shortened temporary device identifier.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If primary authentication is performed to update the application key KAF, then security is improved, but computational overhead and time consumption increase
Solution Approach 1:
The patent segments the authentication key management into two parts: a long-lived anchor key KAKMA that remains fixed, and a short-lived application key KAF that can be refreshed independently. This segmentation allows KAF to be updated without triggering full primary authentication, resolving the contradiction between security and authentication time by enabling frequent key refreshes through a lightweight derivation process rather than complete re-authentication
Solution Approach 2:
The patent performs preliminary action by establishing the anchor key KAKMA and its associated count value during initial authentication. This preliminary setup enables subsequent rapid generation of refreshed KAF values by simply incrementing the count value and applying a key derivation function, eliminating the need for time-consuming full authentication processes while maintaining security
2Device complexity
If the application key KAF is kept fixed until primary authentication, then system complexity is reduced, but security vulnerabilities increase
Solution Approach 1:
The patent introduces dynamics by making the application key KAF changeable over time through a simple counter mechanism. The count value associated with the anchor key KAKMA can be incremented to generate new KAF values, transforming the static key system into a dynamic one that automatically refreshes keys without complex authentication procedures, thus improving security while maintaining manageable system complexity
Solution Approach 2:
The patent applies parameter changes by modifying the count value parameter associated with the anchor key to generate refreshed application keys. By changing this single parameter (the count value) and applying a key derivation function, the system can generate new secure keys without altering the fundamental authentication structure, balancing security improvement with controlled complexity
3Reliability
If frequent key refresh is implemented, then security is enhanced, but computational overhead increases
Solution Approach 1:
The patent extracts the essential security element (the count value) from the complex primary authentication process. By separating the count value management from full authentication, the system can perform frequent key refreshes using only a simple increment operation and key derivation, eliminating the computational overhead of repeated full authentication while maintaining security through frequent key changes
Data Source
AI summary
Disclosed are systems and techniques for wireless communications. For instance, a process may include generating an anchor key based on an authentication server function key; associating a count value with the anchor key; generating a temporary device identifier based on the authentication server function key; generating an enhanced key identifier based on the count value, wherein the enhanced key identifier includes a portion of the temporary device identifier, wherein the portion of the temporary device identifier is less in size than an entire temporary device identifier; and transmitting the enhanced key identifier to a remote application.