Asynchronous Key Provisioning via Encapsulation Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current key management systems are vulnerable to server compromises and cannot securely provision cryptographic keys between devices that cannot directly communicate, limiting access and file sharing, especially in scenarios like IoT and cloud access.
Innovation Solution
A method involving a key provisioning server that operates asynchronously, allowing key transfers between secure devices without revealing the keys to the server, using transport keys that only the target devices can decrypt, and utilizing a web application server for cloud storage applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If keys are provisioned from a key management server to devices, then key distribution is enabled, but the server becomes vulnerable to compromise and keys are exposed to the server
Solution Approach 1:
The patent introduces an intermediary key encapsulation mechanism where the server handles only public keys and encrypted key material, never the actual private keys. The key encapsulation public key acts as a mediator that allows the server to facilitate key provisioning without exposing sensitive key material, thus maintaining server security while enabling key distribution.
Solution Approach 2:
The patent extracts the sensitive key material (private keys) from the server environment entirely. By using device-specific key pairs where private keys never leave the respective devices, the system removes the vulnerability of centralized key storage while maintaining the ability to provision keys through the server using only public key operations.
2Reliability
If direct key transfer between devices is implemented, then security is improved, but devices must be able to communicate directly which limits accessibility
Solution Approach 1:
The server acts as an intermediary that enables key provisioning between devices that cannot communicate directly. The server receives key encapsulation public keys from target devices, stores them securely, and facilitates key material transfer without requiring direct device-to-device communication channels, thus maintaining both security and accessibility.
Solution Approach 2:
The key provisioning process is segmented into separate phases: key pair generation on devices, key encapsulation public key registration with the server, and key material transfer through the server. This segmentation allows devices to remain offline or inaccessible during certain phases while still enabling secure key provisioning when they come online.
3Speed
If synchronous key provisioning is used, then real-time key transfer is achieved, but devices must be available simultaneously which reduces flexibility
Solution Approach 1:
The system performs preliminary actions by having target devices register their key encapsulation public keys with the server in advance, before actual key provisioning is needed. This allows the server to be ready to receive and forward key material immediately when source devices initiate transfer, achieving fast key provisioning without requiring simultaneous device availability.
Solution Approach 2:
The key provisioning system becomes dynamic by allowing devices to come and go independently. Source devices can initiate key transfer at any time, and target devices can retrieve their keys when available, with the server adapting to the availability of each device independently rather than requiring synchronized presence.
Data Source
Figure 1~4
Figure 3
AI summary
The present invention relates to a method to securely and asynchronously provisioning keys from one source secure device to a target secure device through a key provisioning server for which the keys to be provisioned through the method remain unknown.