Communication System Secure Key Exchange via Nonce
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face inefficiencies in exchanging cryptographic keys for secure communication, particularly in verifying the state of remote communication partners through remote attestation, which can be tampered with.
Innovation Solution
A communication system that encrypts a random number as a nonce and uses it as a cryptographic key for secure communication after verifying the remote partner's attribute information, ensuring secure key exchange and protection against replay attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If remote attestation is performed to verify the communication partner's state, then security is improved, but communication efficiency deteriorates due to complex key exchange processes
Solution Approach 1:
The patent applies preliminary action by performing remote attestation and generating the cryptographic key before actual communication begins. The key is generated based on verified attribute information and a nonce, so that when communication starts, the secure channel is already established, eliminating the need for complex real-time key exchange protocols during communication.
Solution Approach 2:
The patent introduces a nonce as an intermediary element in the key generation process. The nonce serves as a random value that both parties use to generate the same cryptographic key without transmitting the key itself, thereby mediating the key establishment process securely and efficiently without requiring complex mutual authentication exchanges.
2Reliability
If cryptographic key exchange is performed between communication systems, then secure communication is achieved, but the process becomes time-consuming and inefficient
Solution Approach 1:
The cryptographic key is generated in advance during the remote attestation phase, before actual communication begins. This preliminary key generation eliminates the need for time-consuming key exchange protocols during the communication phase, as both parties already possess the same key derived from verified attributes and a shared nonce.
Solution Approach 2:
The system performs self-service by automatically generating the cryptographic key locally at each communication endpoint based on their own verified attribute information and the received nonce. No external key distribution server or complex mutual authentication exchange is required, as each party independently generates the same key through deterministic computation.
3Reliability
If attribute information is verified before communication, then tampering detection is improved, but the overall communication process becomes more complex
Solution Approach 1:
The patent merges the remote attestation verification process with the cryptographic key generation process into a single unified operation. Instead of performing verification and then separately establishing key exchange, the system combines these functions by generating the key directly from the verified attribute information and nonce, reducing procedural complexity while maintaining security.
Solution Approach 2:
The verified attribute information serves multiple functions: it acts as both the basis for tampering detection and as input material for cryptographic key generation. This multi-functionality eliminates the need for separate verification and key establishment procedures, simplifying the overall communication process while maintaining both security and efficiency.
Data Source
AI summary
A communication system according to an embodiment includes one or more hardware processors. The one or more hardware processors: transmit, to an external communication system, a cryptographic random number obtained by encrypting a random number; receive verification information for verifying the external communication system, the verification information being generated by the external communication system with the cryptographic random number and attribute information of the external communication system; and perform, by using a cryptographic key based on the random number, communication with the external communication system having been verified with the verification information.