Hierarchical Application Key Management for Low-Power Secure Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication networks face challenges in efficiently generating and managing encryption/decryption keys for secure data transmission between terminal devices and service applications, particularly in scenarios where lower-end devices lack the computational capacity for complex key generation and encryption/decryption processes.
Innovation Solution
A method for generating application keys using an anchor key and a key seed, where the key seed is extracted from a response encrypted by the service application and decrypted by the terminal device, along with a network device comprising processors to manage key generation and a computer program product for implementing these methods, ensuring secure communication sessions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex key generation and encryption/decryption processes are implemented, then security is improved, but device complexity and computational requirements increase
Solution Approach 1:
The key management system is segmented into multiple hierarchical levels: anchor keys at the network level, application keys at the service level, and data encryption keys at the communication level. This segmentation allows lower-end devices to offload complex key generation and management tasks to network nodes, reducing device complexity while maintaining security through the hierarchical structure where each level manages specific security functions.
Solution Approach 2:
Application key management network nodes act as intermediaries between terminal devices and service applications. These network nodes perform complex key generation, management, and distribution tasks, allowing devices with limited computational capacity to benefit from secure encryption without bearing the full computational burden. The intermediary handles the complexity centrally while providing simplified interfaces to end devices.
2Reliability
If multiple levels of encryption keys are managed collaboratively by network functions, then security is improved, but system complexity increases
Solution Approach 1:
The application key management network nodes provide multi-functional capabilities: generating anchor keys, deriving application keys, managing key lifecycles, and distributing keys to multiple service applications. This universal key management infrastructure serves multiple security functions across different applications and services, reducing overall system complexity by consolidating key management operations into dedicated network functions rather than implementing separate key management systems for each application.
Solution Approach 2:
Anchor keys are generated and stored in network nodes before actual communication sessions occur. Application keys are pre-derived from anchor keys and made available when needed. This preliminary key preparation eliminates the need for complex real-time key generation during communication sessions, reducing system complexity while maintaining multi-level security through pre-established hierarchical key relationships.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This disclosure generally relates to encrypted communication between terminal devices and service applications via a communication network. Such encrypted communication may be based on various hierarchical levels of encryption keys that are generated and managed by the communication network. Such encrypted communication and key management may be provided by the communication network to the terminal devices as a service that can be subscribed to. The various levels of encryption keys may be managed to improve flexibility of the communication network and to reduce potential security breaches.