Encryption Key Generation with Partial Correlation for Selective Updates

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing encryption technologies require large encryption keys for multiple communication counterparts, leading to increased management complexity and the need for frequent updates, which can be inefficient and insecure.

Innovation Solution

A generating device that creates a server key and correlated client keys, allowing for efficient key management by reducing the total key length and enabling selective updates of client keys without affecting others, using a system with partial sequences and correlation rules to enhance security and flexibility.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If an encryption key having the same length as the plaintext is used for each communication counterpart, then information-theoretic security is ensured, but the total size of encryption keys increases significantly

Engineering Contradiction:
Improveinformation-theoretic securityVSAvoidtotal size of encryption keys
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The encryption key is divided into multiple parts: a first key part and multiple second key parts. Each communication counterpart is assigned a unique second key part, while the first key part is shared. This segmentation allows the total key material to be reduced while maintaining security, as the shared first key part eliminates redundancy across multiple keys.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Multiple encryption keys are merged by combining a shared first key part with individual second key parts for each counterpart. This merging approach allows collective management of encryption keys, reducing the total key size while ensuring that each counterpart has a unique key for secure communication.

Inventive Principle:
Principle #5Merging (Combining)

2Ease of operation

If multiple encryption keys are collectively managed to reduce total key size, then key management is simplified, but all keys must be updated even when only some need updating

Engineering Contradiction:
Improvekey management efficiencyVSAvoidtime for key updates
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The key structure is segmented into a shared first key part and individual second key parts. This segmentation enables selective updates: when a second key part needs updating, only that specific part must be regenerated and distributed, while the shared first key part remains unchanged. This eliminates the need to update all keys collectively.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The key management system becomes dynamic, allowing flexible updates of individual second key parts independent of others. The system can adapt to specific security needs by updating only the necessary key components, improving operational efficiency and reducing unnecessary update overhead.

Inventive Principle:
Principle #15Dynamics

3Reliability

If encryption keys are frequently updated to maintain security, then security is enhanced, but the complexity and overhead of key management increases

Engineering Contradiction:
ImprovesecurityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

By segmenting keys into shared and individual parts, the system simplifies update procedures. When security updates are needed, only the individual second key parts require regeneration, while the shared first key part remains stable. This reduces the complexity of key management operations compared to updating entire keys or all keys in a collective.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS9531534B2Generating device, re-encrypting device, method, and computer program product
Publication Date: 2016.12.27 KK TOSHIBA
  • US9531534B2 patent drawing
  • US9531534B2 patent drawing
  • US9531534B2 patent drawing

AI summary

According to an embodiment, a generating device includes a first key generator, a second key generator, an output unit, and an update unit. The first key generator is configured to generate a first key that is a sequence of bits according to a first key rule on the basis of a random number. The second key generator is configured to generate multiple second keys that are sequences of bits partially having correlation with one another according to a second key rule on the basis of the first key. The output unit is configured to output the first key and at least one of the second keys. The update unit is configured to generate update information for updating a second key by updating a partial sequence of the second key, the partial sequence having no correlation with the other second keys not to be updated.