Algorithm And KDF Negotiation Between Nodes for Secure Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face challenges in ensuring efficient and secure data transmission by accurately matching encryption and decryption algorithms between sender and receiver due to the variety of algorithms supported by both parties, leading to inefficiencies and potential security vulnerabilities.
Innovation Solution
A method for algorithm and key derivation function negotiation between nodes to determine a common encryption or decryption algorithm and key, allowing for secure and efficient communication using multiple algorithms, including encryption, integrity protection, and authenticated encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple algorithms are supported by sender and receiver, then algorithm diversity and adaptability are improved, but algorithm selection complexity and communication efficiency deteriorate
Solution Approach 1:
The patent applies preliminary action by having the sender and receiver pre-negotiate and determine the algorithm and KDF before actual data transmission. The algorithm negotiation request information is sent in advance, allowing both parties to prepare the necessary cryptographic parameters beforehand, thus avoiding complexity during the actual communication process.
Solution Approach 2:
The patent introduces algorithm negotiation request information as an intermediary mechanism that facilitates algorithm selection between sender and receiver. This intermediary structure standardizes the algorithm selection process, reducing the complexity of directly managing multiple algorithm options while maintaining adaptability.
2Reliability
If algorithm negotiation is performed, then communication security is improved, but communication time and efficiency deteriorate
Solution Approach 1:
The algorithm and key derivation function are determined in advance through negotiation before data transmission begins. This preliminary action ensures that when actual communication occurs, the cryptographic parameters are already established, minimizing any time overhead during the main data transfer process.
Solution Approach 2:
The negotiation mechanism allows the communication system to self-configure the algorithm and KDF based on the capabilities of the sender and receiver. The system automatically selects appropriate algorithms without requiring manual intervention or complex external configuration, reducing the time impact of security protocols.
Data Source
AI summary
A communications method includes receiving, from a second node, first algorithm negotiation request information used to indicate one or more algorithms and one or more key derivation functions, determining at least one first algorithm in the one or more algorithms and at least one first key derivation function in the one or more key derivation functions, and sending, to the second node, first information used to indicate the at least one first algorithm and the at least one first key derivation function.