Counter-Based Encryption Key Generation for Secure Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure communication protocols, such as SSL/TLS and OTPs, do not provide adequate confidentiality and are not suitable for all communication scenarios, particularly in mobile device environments, where short encryption keys can be vulnerable to cryptographic attacks.
Innovation Solution
A method and system using shared keys and counters to generate hash-based message authentication codes, which are used to create long encryption keys for secure communication between computing devices, ensuring confidentiality and resilience against attacks by employing separate counters for asynchronous communication and one-time passwords for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing secure protocols (SSL/TLS) are used, then communication security is provided, but they require additional user authentication and are not suitable for all environments
Solution Approach 1:
The patent extracts the authentication function from the encryption protocol by using separate one-time passwords for authentication and encryption keys for data protection. This separation allows authentication to be handled independently through OTP verification while encryption operates autonomously using counter-based keys, eliminating the need for continuous authentication handshakes required by SSL/TLS.
Solution Approach 2:
The system implements self-service authentication where the counter-based encryption mechanism automatically generates and manages encryption keys without requiring user intervention for each communication session. The counter increments autonomously and derives new keys, providing continuous security without additional authentication steps.
2Reliability
If OTPs are used for authentication, then user authentication security is improved, but data confidentiality is not provided
Solution Approach 1:
The patent merges OTP authentication with counter-based encryption by using the same counter mechanism for both authentication verification and encryption key generation. The OTP verifies the counter value for authentication, while the counter simultaneously drives encryption key derivation, combining both security functions into a unified system that provides both authentication and confidentiality.
3Adaptability or versatility
If short encryption keys are used, then device compatibility is improved, but vulnerability to cryptographic attacks increases
Solution Approach 1:
The system implements dynamic key generation where the encryption key changes with each counter value. Instead of using a static short key, the counter-based derivation generates a new encryption key for each message or session, effectively providing long-term security through key rotation without requiring long static keys. This dynamic approach enhances resistance to cryptographic attacks while maintaining compatibility with standard encryption algorithms.
Solution Approach 2:
The patent changes the parameter of key length from static to dynamic by using counter-based key derivation. The effective key length is extended not by increasing the base key size but by generating multiple unique keys from a shorter seed through the counter mechanism, providing enhanced security against attacks while maintaining device compatibility.
4Stability of the object's composition
If synchronous communication protocols are used, then message ordering is maintained, but asynchronous communication capabilities are limited
Solution Approach 1:
The patent segments the communication protocol into independent authentication and encryption components. The counter-based encryption can operate independently with different timing and ordering requirements than authentication, allowing messages to be encrypted and transmitted asynchronously while authentication is verified separately. This segmentation enables flexible handling of message ordering without constraining asynchronous communication.
Data Source
AI summary
A system and method for secure communication is provided. Outgoing messages to another computing device are encrypted using a first shared key shared with said other computing device, and a first counter, said first shared key and said first counter being stored in storage of a computing device. Incoming messages from said other computing device are decrypted using said first shared key and a second counter stored in said storage of said computing device.