Dynamic Communication Key Generation for Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network security methods are vulnerable to unauthorized access due to the interception of shared security information, such as usernames and passwords, which can lead to unauthorized access to devices and resources.
Innovation Solution
An apparatus and method that generate a unique communication key for each message transmission between devices using a set of common data, which is hashed and salted, and expires after a predetermined period, providing an additional layer of security by requiring matching keys for message verification and encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a shared secret or predefined username and password is used for secure communication, then authentication is simplified and ease of operation is improved, but security is worsened because unauthorized third parties can intercept and misappropriate the security information
Solution Approach 1:
The patent implements dynamic key generation where communication keys are continuously updated based on evolving transaction data between devices. Instead of using static shared secrets, the system generates new keys dynamically from changing transaction states, making intercepted keys obsolete immediately and preventing unauthorized access while maintaining operational simplicity through automated key management
Solution Approach 2:
The system changes the parameter of security keys from static to dynamic by deriving keys from transaction data that continuously changes. The communication key is regenerated based on new transaction information, ensuring that even if a key is intercepted, it cannot be reused because the underlying transaction parameters have changed, thus improving security while keeping the authentication process simple
2Productivity
If a single communication key is used for multiple messages, then processing efficiency is improved, but security is worsened because interception of one key compromises all subsequent communications
Solution Approach 1:
The patent implements periodic key regeneration where communication keys are updated at regular intervals or after a predetermined number of messages. This periodic action ensures that even if a key is intercepted, its validity period is limited, and new keys are generated continuously from evolving transaction data, maintaining both security and processing efficiency through automated key rotation
Solution Approach 2:
The system transitions from static key usage to dynamic key generation by continuously creating new communication keys based on changing transaction data. Each message or message batch uses a freshly generated key derived from current transaction state, ensuring that interception of one key does not compromise future communications while maintaining efficient automated key management
3Reliability
If transaction data is used to generate communication keys, then security is improved by preventing unauthorized access, but device complexity increases due to additional key generation and verification processes
Solution Approach 1:
The patent implements self-service key generation where both devices independently generate the same communication key using identical transaction data and hashing algorithms. Each device autonomously derives keys from shared transaction information without requiring key distribution or complex key management infrastructure, reducing system complexity while maintaining high security through cryptographic hash functions and salt values
Data Source
AI summary
Apparatuses, systems, methods, and program products are disclosed for transaction based networks security. A data module determines a set of data that is common between a first device and a second device. A key module generates, on a first device, a communication key based on a set of data. A message module secures a message sent to a second device from a first device with a communication key. A second device accepts a message in response to a communication key matching a corresponding communication key generated on the second device.