Dynamic Key Generation for Secure Device Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing symmetric-key cryptography systems face security risks due to insecure key storage in processor-based devices, which can compromise encrypted data if the memory is not sufficiently secure.
Innovation Solution
A method is introduced where a key is generated using second information retrieved from a device and third information, processed by a cryptographic algorithm, to control access to the device, allowing secure key management without direct storage of the key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secret keys are stored in device memory for access control, then access control functionality is enabled, but security is compromised if memory is not sufficiently secure
Solution Approach 1:
The patent extracts the secret key from the device memory entirely. Instead of storing the key locally, the system retrieves key components (first information and second information) from external secure sources and generates the key dynamically during access control operations. This eliminates the security vulnerability of storing keys in potentially insecure device memory.
Solution Approach 2:
The patent introduces an intermediary key generation process that combines first information (from secure storage or external source) and second information (device-specific identifier) to create the access key dynamically. This intermediary mechanism allows secure key derivation without directly storing the complete key in device memory, bridging the gap between security requirements and device capabilities.
2Reliability
If a unique secret key is generated for each transmission to maximize security, then security is improved, but key management complexity increases
Solution Approach 1:
The patent performs preliminary actions by securely storing only the first information (key component) in advance, while the second information (device identifier) is inherently available. The complete key is generated on-demand during access control operations, combining these pre-prepared elements without requiring complex key storage or management infrastructure.
3Reliability
If secret keys are changed periodically to increase security, then security is improved, but operational complexity increases
Solution Approach 1:
The patent implements dynamic key generation where the access key is created on-demand during each access control operation by combining stored first information with current second information (device identifier). This dynamic approach allows periodic key changes and enhances security without requiring complex manual key management operations, as the system automatically generates appropriate keys based on current operational context.
Data Source
AI summary
A method of controlling access to a device. First information is provided. Second information is retrieved from the device. The first information is used to retrieve associated third information. A key is generated based on the second information and the third information. Access to the device is controlled by using the key.