Embedded Device Secure Key Distribution via Manufacturer Random Number
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Embedded devices face challenges in secure key distribution due to limitations in generating good random numbers and configuring shared keys, particularly in bulk manufacturing and trust issues between manufacturers and recipients, with existing methods being insecure and costly to implement.
Innovation Solution
A method where a manufacturer designates a memory location in the embedded device for storing a random number, generates and stores it during manufacturing, and the embedded program uses this random number to obtain a security key, which can be updated cyclically, either by generating a new key or combining with the previous random number, to maintain secure connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the embedded device generates random numbers itself for key distribution, then the device can autonomously establish secure connections, but the security and reliability of key distribution deteriorates due to the device's inability to generate good random numbers
Solution Approach 1:
The patent introduces an external computer system as an intermediary that generates random numbers and security keys on behalf of the embedded device. The computer acts as a mediator between the device and the secure connection requirements, providing the random number generation capability that the embedded device lacks while maintaining the device's autonomous operation through automated program execution.
Solution Approach 2:
The patent implements preliminary action by having the computer generate and store random numbers in the embedded device's memory during the device's initialization or before key distribution is needed. This pre-generation of random numbers ensures that when the embedded program needs to establish secure connections, high-quality random numbers are already available, eliminating the need for the device to generate them autonomously.
2Productivity
If secure key distribution is implemented in bulk manufacturing, then production efficiency increases, but security and trust issues worsen due to manufacturer-recipient trust concerns
Solution Approach 1:
The patent implements self-service by enabling the embedded device to automatically obtain security keys through automated program execution without requiring manual configuration or trust-based manual key distribution. The device autonomously requests and receives security keys from the computer system, eliminating the need for manual intervention and reducing trust concerns in bulk manufacturing scenarios.
Solution Approach 2:
The computer system serves as an intermediary that facilitates secure key distribution during bulk manufacturing. Instead of requiring direct trust between the manufacturer and each device recipient, the computer acts as a neutral mediator that automatically generates and distributes security keys to multiple devices, ensuring consistent security without manual trust establishment.
3Reliability
If existing secure key distribution methods are used, then security can be maintained, but the cost and complexity of implementation increases
Solution Approach 1:
The patent extracts the complex random number generation and key management functionality from the embedded device and relocates it to an external computer system. This extraction allows the embedded device to maintain security through simplified automated programs while the complex cryptographic operations are performed externally, reducing the device's implementation complexity and cost.
Solution Approach 2:
The patent uses copying by having the computer generate security keys and copy them to the embedded device's memory through automated transmission. This copying mechanism simplifies the device's implementation compared to having it generate and manage its own keys, as the device simply receives and stores pre-generated keys provided by the external system.
Data Source
AI summary
An embedded program on an embedded device determines whether a security key has been assigned to the embedded device. If the security key has not been assigned, the embedded program uses a random number that is provided by a manufacturer of the embedded device and that is stored in memory of the embedded device to obtain the security key for the embedded device. The security key is stored in the memory of the embedded device. The security key is used to establish secure connections with other devices.