Dynamic Bus Key Generation Using Segmented Device Keys

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing digital rights management (DRM) methods fail to securely protect bus keys, allowing unauthorized access and distribution of encrypted content, even when a bus key is leaked.

Innovation Solution

A method and apparatus for sharing a bus key between devices, involving the receipt of an encrypted device key, decryption using a corresponding key, generation of a new bus key using a random number and the decrypted device key, and transmission of the new bus key, ensuring secure data encryption and protection even if the bus key is leaked.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a bus key is generated using a device key for encrypting data transmitted through a bus, then data transmission security is improved, but the device key can be leaked to third parties enabling them to generate bus keys and decrypt data

Engineering Contradiction:
Improvedata transmission securityVSAvoiddevice key leakage
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent segments the device key into multiple key elements (first key element, second key element, third key element) that are stored in different locations or forms. The bus key is generated by combining these segmented key elements with random numbers, ensuring that no single point contains the complete device key. This segmentation prevents third parties from obtaining the full device key even if some key elements are compromised.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent performs preliminary encryption of the device key into multiple key elements before actual data transmission occurs. These key elements are prepared and stored in advance in secure locations. When data needs to be transmitted, the bus key is generated by combining these pre-prepared key elements with freshly generated random numbers, rather than using the raw device key directly.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If a bus key is leaked, then a third party can decrypt data encrypted with the bus key, but the invention enables continued secure transmission by generating new bus keys

Engineering Contradiction:
Improveencrypted data protectionVSAvoidbus key leakage
Core Design Contradiction:
ReliabilityVSObject-generated harmful factors

Solution Approach 1:

The patent implements dynamic bus key generation where the bus key is not static but changes over time. Each bus key is generated by combining key elements with a random number that is newly created when a predetermined time passes or when the first device is initialized. This dynamic regeneration ensures that even if a bus key is leaked, it becomes obsolete after a certain period or initialization event, and a new bus key is generated that the third party cannot decrypt.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes the parameters used in bus key generation by introducing time-based or initialization-based random numbers. The bus key parameters are not fixed but vary based on temporal or operational conditions. This parameter change strategy ensures that the encryption characteristics evolve over time, rendering previously leaked keys ineffective for future data transmissions.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS7975141B2Method of sharing bus key and apparatus therefor
Publication Date: 2011.07.05 SAMSUNG ELECTRONICS CO LTD
  • US7975141B2 patent drawing
  • US7975141B2 patent drawing
  • US7975141B2 patent drawing

AI summary

A method and apparatus of sharing a bus key is provided, the method including receiving at a first device a device key, encrypted using an encryption key, from a storage device; decrypting the encrypted device key using a decryption key corresponding to the encryption key; creating a random number, and generating a bus key using the created random number and the decrypted device key, by which data to be transmitted through a bus can be encrypted using the bus key; and transmitting the generated bus key to a predetermined device connected to the first device via the bus.