Personal Device Encryption With Deterministic ECC Key Derivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic data protection methods face challenges in securely transmitting cryptographic keys due to electromagnetic interference and the vulnerability of short codes like PINs and passwords, while existing key transmission methods are susceptible to interception.
Innovation Solution
A method utilizing deterministic keys based on elliptic curve cryptography (ECC) is implemented, where a deterministic key is generated on the electronic device and shared with a key device, allowing encryption and decryption without transmitting private keys, enhancing security by using a common secret derived from asymmetric cryptography pairs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic keys are transmitted from USB drive to electronic device, then data protection is enabled, but electromagnetic signals during transmission allow third parties to obtain the key
Solution Approach 1:
The patent extracts the secret key from the transmission process entirely. Instead of transmitting the cryptographic key from the USB drive to the electronic device, the system generates the secret key deterministically within the electronic device using stored information and a deterministic algorithm. This eliminates the harmful electromagnetic transmission of secret keys while maintaining data protection capabilities.
Solution Approach 2:
The patent introduces a deterministic algorithm as an intermediary mechanism. Rather than directly transmitting the secret key, the system uses this algorithm to generate the key deterministically from stored information. This intermediary process prevents direct key transmission and the associated electromagnetic vulnerability while still enabling secure data protection.
2Ease of operation
If short codes like PINs are used for data protection, then ease of operation is improved, but security is weakened due to easy determination through trial combinations
Solution Approach 1:
The patent changes the parameter of key generation from random short codes to deterministic generation based on stored information and algorithmic processing. This transformation maintains ease of operation (users still input simple information) while dramatically improving security by making trial-and-error attacks ineffective against the deterministic key derivation process.
3Reliability
If passwords or passphrases are used for data protection, then security is improved over PINs, but user burden increases due to memorization requirements
Solution Approach 1:
The patent enables the system to serve itself by automatically generating the secret key deterministically from information already stored in the electronic device. Users provide simple input information, and the system handles the complex cryptographic key generation automatically, eliminating the need for users to memorize complex passwords while maintaining strong security.
Data Source
AI summary
A method (400) of encrypting data at an electronic device (3) where the electronic device is associated with a key device (5). Each device is associated with an asymmetric cryptography pair, each pair including a first private key and a first public key. Respective second private and public keys may be determined based on the first private key, first public key and a deterministic key. A secret may be determined based on the second private and public keys. The data at the electronic device (3) may be encrypted using the determined secret or an encryption key that is based on the secret. Information indicative of the deterministic key may be sent to the key device (5) where the information may be stored.