Communication Device Key Generation Latency Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data encryption systems, particularly those using security modules and hosts, suffer from high latency due to the time required for data transfer and encryption, and weak encryption capacities can lead to security vulnerabilities, especially when generating a large number of keys for real-time data transmission like voice communication.
Innovation Solution
A communication system and method where each communication device has a security module generating initial keys and a host with an extension module generating multiple encryption keys, allowing for dynamic adaptation of key generation based on data requirements, using a session key negotiated between devices or from an external source, ensuring secure and efficient encryption with reduced latency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If conventional security modules with weak encryption capacities are used, then device complexity is reduced, but encryption speed becomes insufficient for real-time data transmission
Solution Approach 1:
The encryption system is divided into two separate components: a security module containing the encryption algorithm and a host containing the key management and data processing functions. This segmentation allows the security module to remain simple while the host handles the computationally intensive key generation and data processing, thereby improving encryption speed without increasing the complexity of the security module itself.
Solution Approach 2:
A key derivation function acts as an intermediary between the security module and the host. This function generates multiple encryption keys from a single session key, enabling the system to achieve high encryption throughput without requiring the security module to perform complex encryption operations directly on the data stream.
2Productivity
If a large number of keys are generated for real-time data transmission, then encryption capacity is improved, but latency increases due to the time required for key generation and data transfer
Solution Approach 1:
The system pre-generates multiple encryption keys from a session key before data transmission begins. This preliminary key generation allows the encryption process to start immediately without waiting for key generation during data transfer, thereby reducing latency while maintaining high encryption capacity.
Solution Approach 2:
The key derivation function continuously generates multiple keys from the session key in a continuous process, ensuring that encryption keys are always available for immediate use. This continuous key generation eliminates gaps in encryption capability and maintains steady-state performance without interruptions or delays.
3Ease of operation
If the host is not placed in a secure environment, then ease of operation is improved, but security is compromised as the extension function may be found and used for illegal decryption
Solution Approach 1:
The most sensitive cryptographic function (key derivation) is extracted from the host and placed in the security module. This extraction ensures that the critical security function resides in a secure environment, preventing unauthorized access or illegal decryption, while the host can still operate easily with the generated keys for encryption operations.
Data Source
AI summary
The present invention relates to a method for processing data in a communication device comprising a host and a security module associated with this host. This method comprises the steps of generating, by the security module, a plurality of initial keys from an initial keys generation function, and of transmitting said plurality of initial keys to said corresponding host. For each initial key received by the host, the method comprises a step of generating a plurality of encryption keys by an extension module of said host, by using an extension function. The method further comprises the steps of receiving the data to be processed by said host and of combining said data to be processed with said encryption keys, in a combination module of said host.