Broadcast Encryption Key Management Using Hash Chains
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems consume excessive resources when updating and transmitting encryption keys for broadcast services, leading to inefficiencies in network and terminal operations.
Innovation Solution
The method involves generating a key pair and applying forward and reverse hash chains to create multiple Traffic Encryption Keys (TEKs), which are used to encrypt and decrypt broadcast service data, reducing the need for frequent key updates and transmissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption keys are frequently updated and transmitted in conventional broadcast systems, then data security is maintained, but network and terminal resources are excessively consumed
Solution Approach 1:
The patent applies preliminary action by pre-generating multiple TEKs using forward and reverse hash chains before broadcast transmission. The network server creates these encryption keys in advance and transmits them to terminals along with the broadcast data, eliminating the need for frequent real-time key updates and reducing resource consumption during actual broadcast operations
Solution Approach 2:
The patent uses copying by transmitting copies of pre-generated TEKs to multiple terminals simultaneously through the broadcast channel. Instead of establishing individual secure connections for key distribution, the system creates copies of the encryption keys and distributes them efficiently to all authorized terminals receiving the broadcast service
2Reliability
If multiple encryption keys are generated and transmitted to terminals, then broadcast service security is improved, but the complexity of key management increases
Solution Approach 1:
The patent applies self-service by enabling terminals to autonomously generate the required TEKs using the transmitted hash chain parameters. Each terminal independently computes the sequence of encryption keys using the forward or reverse hash functions and the provided initial values, eliminating the need for complex centralized key management and distribution infrastructure
Solution Approach 2:
The patent segments the key management process into two distinct phases: (1) pre-computation of hash chain parameters by the network server, and (2) independent TEK generation by each terminal using local computation. This segmentation separates the complex key generation logic from the terminals while maintaining security, reducing overall system complexity
3Reliability
If conventional key update procedures are used, then encryption security is maintained, but transmission time and network overhead increase
Solution Approach 1:
The patent implements periodic action by organizing key transmission into discrete broadcast cycles where pre-generated TEKs are transmitted along with broadcast content. Instead of continuous or frequent key updates, the system uses periodically refreshed hash chain parameters that generate multiple TEKs valid for extended periods, reducing transmission overhead and time
Data Source
AI summary
A method and apparatus for providing a broadcast service in a communication system is provided. The method includes generating a key pair comprising a first key and a second key, generating at least one of forward encryption keys by applying a forward hash chain to the first key, generating at least one of reverse encryption keys by applying a reverse hash chain to the second key, generating at least one of encryption keys using the at least one of forward encryption keys and the at least one of reverse encryption keys, encrypting broadcast service data using the at least one of encryption keys, and broadcasting the encrypted broadcast service data.