Dynamic PSK Rotation for Secure Communication Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security risks associated with pre-shared keys (PSKs) remain unchanged, making them vulnerable to cracking, which compromises data security during communication between apparatuses.
Innovation Solution
A method for updating PSKs by generating a new PSK based on PSK key material, using asymmetric key algorithms, and storing the new PSK in non-volatile memory to prevent loss during power failures, along with integrity verification and encryption to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If PSK remains unchanged for long-term use, then authentication simplicity is maintained, but security risk increases due to potential cracking
Solution Approach 1:
The patent implements periodic PSK updates at predetermined intervals. The authentication server generates new PSKs at regular time intervals and distributes them to terminal devices, ensuring that even if a PSK is compromised, the window for exploitation is limited. This periodic regeneration balances operational simplicity with security by automatically updating keys without requiring complex user intervention.
Solution Approach 2:
The patent transitions from a static PSK system to a dynamic one where PSKs are continuously regenerated. The system adapts by implementing both time-based updates (at predetermined intervals) and event-based updates (triggered by security events), making the authentication key landscape dynamic and resistant to static cracking attacks.
2Reliability
If PSK is frequently updated, then security risk is reduced, but system complexity increases due to key management
Solution Approach 1:
The patent implements self-service mechanisms where terminal devices automatically receive and install new PSKs from the authentication server without requiring manual user configuration. The devices autonomously manage key updates by processing server instructions, storing new keys in secure storage, and switching to new PSKs at appropriate times, thereby reducing operational complexity despite frequent updates.
Solution Approach 2:
The authentication server acts as an intermediary that centralizes key management complexity. Instead of each terminal device independently managing complex key rotation, the server consolidates this function by generating, distributing, and coordinating PSK updates across all devices, simplifying the overall system architecture while enabling frequent updates.
3Reliability
If PSK update mechanism is implemented, then security is enhanced, but communication overhead increases due to additional packets
Solution Approach 1:
The patent merges PSK update communication with existing authentication and data transmission protocols. Update instructions and new PSKs are conveyed through established communication channels and packet structures, avoiding the need for separate dedicated update protocols. This integration minimizes additional communication overhead while implementing comprehensive key update functionality.
Data Source
AI summary
A pre-shared key (PSK) updating method is disclosed. A first communication apparatus stores a first PSK for processing, within an aging periodicity of the first PSK, a packet exchanged between the first communication apparatus and a second communication apparatus. The first communication apparatus may receive, within the aging periodicity of the first PSK, a first protocol packet that is sent by the second communication apparatus and includes a first PSK key material for generating a second PSK. The second PSK is for processing, within an aging periodicity of the second PSK, a packet exchanged between the first communication apparatus and the second communication apparatus.


