Edge Port Key Initialization Using Asymmetric Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems face challenges in securely transmitting encryption and decryption keys between device nodes, particularly when the device is powered on, as they are vulnerable to key theft and lack efficient key generation mechanisms.
Innovation Solution
Implement an asymmetric encryption and decryption algorithm at the edge port to generate a public and private key pair, transmit the public key to the encryption and decryption platform, and encrypt key-related data using the private key, which is then decrypted by the platform using the public key, ensuring secure initialization configuration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Use of energy by moving object
If a key is generated by an edge port and reloaded to the device node after power-on to save processing resources, then processing resource consumption is reduced, but the key transmission becomes vulnerable to key theft
Solution Approach 1:
The patent introduces a trusted third party (encryption and decryption platform) as an intermediary to securely transmit keys. The edge port generates keys and transmits them to the platform, which then delivers them to device nodes. This intermediary structure allows secure key distribution without direct trust between edge ports and device nodes, resolving the security vulnerability while maintaining resource savings.
Solution Approach 2:
The patent replaces direct mechanical key copying and reloading with cryptographic encryption mechanisms. Instead of physically reloading keys, the system uses asymmetric encryption (RSA) where the edge port encrypts keys with the platform's public key, and the platform decrypts them with its private key. This substitution of mechanical operations with cryptographic operations secures key transmission while maintaining efficiency.
2Reliability
If different keys are used for encryption and decryption after each power-on to enhance security, then key theft prevention is improved, but the complexity of key management increases
Solution Approach 1:
The edge port autonomously generates different keys for each power-on cycle without external intervention. The system self-manages key generation and distribution through automated cryptographic operations, eliminating the need for manual key management while ensuring unique keys are used each time, thus preventing key theft without increasing operational complexity.
Solution Approach 2:
The patent implements dynamic key parameter generation where new cryptographic keys are created based on random numbers generated at each power-on event. The key parameters (public and private key pairs) are dynamically changed for each session, ensuring that even though the same device node is used repeatedly, different secure keys are employed each time, enhancing security without requiring complex manual key rotation procedures.
3Reliability
If asymmetric encryption algorithms are used to encrypt key-related data before transmission, then transmission security is enhanced, but processing time increases
Solution Approach 1:
The patent segments the encryption process into two distinct stages: 1) The edge port generates and transmits only the necessary public key parameters (modulus and power) to the platform, and 2) The platform performs the actual encryption of key-related data using these parameters. This segmentation allows asymmetric encryption to be applied only where needed (during initial key exchange) rather than for all data transmission, reducing overall processing time while maintaining security.
Solution Approach 2:
The system performs preliminary key exchange and encryption setup during the initialization phase, where the edge port transmits public key parameters to the platform before actual data encryption operations. This preliminary action establishes secure communication channels in advance, allowing subsequent data transmission to proceed more quickly without repeated encryption overhead, thus reducing total processing time while maintaining high security standards.
Data Source
AI summary
The present disclosure provides a method of encryption and decryption initialization configuration, an edge port, an encryption and decryption platform and a security system, relating to the technical field of data processing. The method includes: generating, by an edge port, a public key and a private key of an asymmetric encryption and decryption algorithm, and transmitting the public key to an encryption and decryption platform; encrypting, by the edge port, key-related data of the symmetric encryption and decryption algorithm required by the encryption and decryption platform via the private key of the asymmetric encryption and decryption algorithm, and transmitting same to the encryption and decryption platform; and decrypting to obtain, by the encryption and decryption platform, the key-related data according to the public key of the asymmetric encryption and decryption algorithm, and completing initialization configuration.