Application Key Establishment from Common Entropy Sources
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems require key exchange over a network, which consumes resources, compromises security, and complicates communication channels.
Innovation Solution
Applications independently generate identical private keys using data from common entropy sources, eliminating the need for network-based key exchange and continuously generating new keys to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network-based key exchange is used, then secure communication can be established, but resource consumption increases and security is compromised
Solution Approach 1:
The patent extracts the key exchange process from the network communication channel and performs it locally using entropy sources available on each device. This eliminates the need to transmit keys over the network, thereby reducing resource consumption and eliminating the security risks associated with network-based key exchange.
Solution Approach 2:
Each application independently generates its own cryptographic keys using local entropy sources without requiring service from other applications or network infrastructure. This self-service approach reduces dependency on network resources and eliminates security vulnerabilities related to key transmission.
2Reliability
If network-based key exchange is used, then secure communication can be established, but communication channel complexity increases
Solution Approach 1:
The key exchange functionality is extracted from the network communication channel and implemented locally within each application using available entropy sources. This simplifies the communication channel by removing the key exchange step entirely, reducing protocol complexity and eliminating the need for secure key transmission mechanisms.
3Reliability
If new cryptographic keys are generated continuously, then security is enhanced, but resource consumption increases
Solution Approach 1:
The system generates new cryptographic keys periodically based on changes in entropy sources rather than continuously. This periodic key regeneration maintains security by ensuring keys change when underlying entropy changes, while avoiding the excessive resource consumption of continuous key generation.
Data Source
AI summary
Aspects of the present disclosure involve a system comprising a computer-readable storage medium storing a program and a method for performing operations comprising: accessing, by a first application implemented on a client device, data collected from one or more entropy sources; causing a second application implemented on the client device to access the data collected from the one or more entropy sources; generating a shared cryptographic key using the data collected from one or more entropy sources; establishing a communication channel between the first application and the second application; and exchanging, over the communication channel between the first application and the second application, one or more messages that have been encrypted using the shared cryptographic key.