Application Session Key Derivation for Secure UE-NAF Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems lack individualized communication security for multiple applications or services, relying on a single shared secret for all communications, which compromises security and efficiency.
Innovation Solution
A user equipment (UE) generates a freshness parameter, combined with a first session key to create a unique session key for each application, which is then used to secure communications with a network device, ensuring individualized security without exchanging private keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single shared secret is used for all communications between UE and network device, then device complexity is reduced, but communication security deteriorates
Solution Approach 1:
The patent segments the single shared secret into multiple application-specific session keys. Each application receives a unique freshness parameter that is combined with the shared secret to derive a dedicated session key, ensuring that compromise of one key does not affect others while maintaining manageable security architecture.
Solution Approach 2:
The patent applies local quality by making each session key unique to specific applications or services. The freshness parameter is generated locally at the UE for each application, and the resulting session key is used exclusively for that application's communications, providing tailored security properties for each service.
2Reliability
If individualized session keys are generated for each application, then communication security is improved, but device complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-establishing a shared secret between the UE and network device before applications need to communicate. This shared secret serves as a root from which all application-specific session keys are derived, eliminating the need for complex key distribution mechanisms while enabling individualized security.
Solution Approach 2:
The freshness parameter acts as an intermediary element that bridges the shared secret and application-specific keys. It is generated locally at the UE for each application and combined with the shared secret through a key derivation function to produce the unique session key, simplifying the key management process.
3Ease of operation
If a single shared secret is used for all applications, then ease of operation is improved, but loss of information increases
Solution Approach 1:
The patent segments the security context by deriving separate session keys for each application based on the shared secret and application-specific freshness parameters. This ensures that security information and encryption contexts remain distinct for each application, preventing information leakage while maintaining operational simplicity.
Solution Approach 2:
The patent changes the parameter from a single static shared secret to multiple dynamic session keys derived from the shared secret and application-specific freshness parameters. This parameter transformation maintains ease of operation through the shared secret while enabling application-specific security contexts to prevent information loss.
Data Source
AI summary
In embodiments of systems and methods for synchronous content presentation, a user equipment (UE) may generate a freshness parameter, generate a unique session key based on a first session key and the freshness parameter, and send the freshness parameter to a Network Application Function (NAF) of a network device in a configuration that will enable the NAF to generate the unique session key. The network device may receive the freshness parameter, receive from a Key Server Function (KSF) the first session key, and generate based on the freshness parameter and the first session key the unique session key. The UE and the network device may then conduct secure communications using the unique session key without exchanging the unique session key between the two devices.