Ephemeral Key Rotation During Quick Boot Encryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Computing devices face security vulnerabilities due to the persistence of static encryption keys during quick boots, which can be exploited by hackers, compromising the security of hardware and software.

Innovation Solution

Generate a new ephemeral key in the secure portion of the processor during a quick boot to wrap and unwrap encryption keys, ensuring their ephemerality by replacing static keys with time-varying keys.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If static encryption keys are used during quick boot, then boot speed is improved, but security is compromised due to key persistence

Engineering Contradiction:
Improveboot speedVSAvoidsecurity
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The patent implements dynamic key generation by creating ephemeral keys during quick boot operations. Instead of using static encryption keys that persist across reboots, the system generates new cryptographic keys each time the device boots quickly, ensuring that even if one key is compromised, it cannot be used to decrypt data from other boot sessions. This dynamic approach maintains security while preserving fast boot performance.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent employs disposable ephemeral keys that are generated for single-use during quick boot and then discarded. These short-living cryptographic keys are created in volatile memory and automatically destroyed when the device shuts down or reboots, preventing persistence of encryption keys. This approach provides strong security without requiring complex key management infrastructure.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

2Reliability

If ephemeral keys are generated during quick boot, then security is improved, but processing time increases

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs preliminary key generation actions during the quick boot process by generating ephemeral keys early in the boot sequence before any sensitive operations occur. The system prepares the cryptographic keys in advance during the initialization phase, so that when actual data encryption or decryption is needed, the keys are already ready. This eliminates delays that would occur if keys had to be generated on-demand during critical operations.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements self-service key management where the quick boot process automatically generates and manages its own ephemeral keys without requiring external key distribution or manual intervention. The ephemeral keys are generated locally in the device's secure enclave or trusted execution environment, eliminating the need for time-consuming key exchange protocols or external authentication services.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS12603763B2Systems and methods for ensuring ephemerality of encryption keys
Publication Date: 2026.04.14 QUALCOMM INC
  • US12603763B2 patent drawing
  • US12603763B2 patent drawing
  • US12603763B2 patent drawing

AI summary

Methods for updating ephemeral keys on quick boot of a computing device, including determining, by a processor of the computing device, that a power-on transition is from a quick boot and generating, in a secure portion of the processor, a new ephemeral key for use in wrapping one or more encryption keys of a key ring for use in an unsecure portion of the processor in response to the quick boot. The secure portion of the processor may unwrap each of the one or more encryption keys of the key ring with a prior ephemeral key before wrapping the one or more encryption keys with the new ephemeral key.