Blockchain-Based Symmetric Key Generation for Secure Device Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The proliferation of network-enabled computing devices poses challenges in providing data security for interactions between devices, as existing encryption keys can be compromised, making it difficult to maintain secure communication within networks.
Innovation Solution
A network device generates symmetric cryptographic keys using inputs from computing devices, which are stored in a tamper-resistant blockchain, and distributes these keys to ensure secure communication between devices using a protocol set and cryptographic functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If devices use encryption keys to secure communications, then data security is improved, but the risk of key compromise increases with more networked devices
Solution Approach 1:
The system segments the encryption key management by introducing a dedicated key management server that generates and distributes encryption keys to devices. This separates the key generation function from individual devices, reducing the attack surface on each device while maintaining security across the network.
Solution Approach 2:
A key management server acts as an intermediary between devices, centrally managing encryption key generation, distribution, and rotation. This intermediary approach allows centralized security policy enforcement and key lifecycle management without requiring complex peer-to-peer key management between all device pairs.
2Ease of operation
If a centralized system manages encryption keys for all devices, then security management becomes easier, but the system complexity increases
Solution Approach 1:
The key management server provides multiple functions including key generation, key distribution, key rotation, and key revocation through a single unified system. This multi-functional approach consolidates what would otherwise require separate mechanisms for each key management task, reducing overall system complexity while improving ease of operation.
Solution Approach 2:
Devices automatically receive and manage their encryption keys through the key management server without requiring manual configuration or intervention. The system performs self-service key provisioning and updates, reducing operational complexity while maintaining ease of use.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computing device may be configured to receive a set of inputs from other computing devices. The set of inputs may include inputs derived by the computing devices utilizing cryptographic keys of the computing devices. The set of inputs may be stored in a blockchain such that the inputs are tamper resistant. A symmetric key may be generated (periodically, upon expiration of a timer, according to a protocol set, upon request, etc.) from two or more of the set of inputs. The generated symmetric key may be distributed to the computing devices. The symmetric key may be utilized to encrypt and decrypt communications between two computing devices.