Dynamic PSK Rotation for Secure Communication Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The security risks associated with pre-shared keys (PSKs) remain unchanged, making them vulnerable to cracking, which compromises data security during communication between apparatuses.

Innovation Solution

A method for updating PSKs by generating a new PSK based on PSK key material, using asymmetric key algorithms, and storing the new PSK in non-volatile memory to prevent loss during power failures, along with integrity verification and encryption to enhance security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If PSK remains unchanged for long-term use, then authentication simplicity is maintained, but security risk increases due to potential cracking

Engineering Contradiction:
Improveauthentication simplicityVSAvoidsecurity risk
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements periodic PSK updates at predetermined intervals. The authentication server generates new PSKs at regular time intervals and distributes them to terminal devices, ensuring that even if a PSK is compromised, the window for exploitation is limited. This periodic regeneration balances operational simplicity with security by automatically updating keys without requiring complex user intervention.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The patent transitions from a static PSK system to a dynamic one where PSKs are continuously regenerated. The system adapts by implementing both time-based updates (at predetermined intervals) and event-based updates (triggered by security events), making the authentication key landscape dynamic and resistant to static cracking attacks.

Inventive Principle:
Principle #15Dynamics

2Reliability

If PSK is frequently updated, then security risk is reduced, but system complexity increases due to key management

Engineering Contradiction:
Improvesecurity riskVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements self-service mechanisms where terminal devices automatically receive and install new PSKs from the authentication server without requiring manual user configuration. The devices autonomously manage key updates by processing server instructions, storing new keys in secure storage, and switching to new PSKs at appropriate times, thereby reducing operational complexity despite frequent updates.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The authentication server acts as an intermediary that centralizes key management complexity. Instead of each terminal device independently managing complex key rotation, the server consolidates this function by generating, distributing, and coordinating PSK updates across all devices, simplifying the overall system architecture while enabling frequent updates.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If PSK update mechanism is implemented, then security is enhanced, but communication overhead increases due to additional packets

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication overhead
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent merges PSK update communication with existing authentication and data transmission protocols. Update instructions and new PSKs are conveyed through established communication channels and packet structures, avoiding the need for separate dedicated update protocols. This integration minimizes additional communication overhead while implementing comprehensive key update functionality.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS12500745B2Pre-shared key PSK updating method and apparatus
Publication Date: 2025.12.16 HUAWEI TECH CO LTD
  • US12500745B2 patent drawing
  • US12500745B2 patent drawing
  • US12500745B2 patent drawing

AI summary

A pre-shared key (PSK) updating method is disclosed. A first communication apparatus stores a first PSK for processing, within an aging periodicity of the first PSK, a packet exchanged between the first communication apparatus and a second communication apparatus. The first communication apparatus may receive, within the aging periodicity of the first PSK, a first protocol packet that is sent by the second communication apparatus and includes a first PSK key material for generating a second PSK. The second PSK is for processing, within an aging periodicity of the second PSK, a packet exchanged between the first communication apparatus and the second communication apparatus.