White-Box Cryptography Using GNSS Navigation Data Entropy

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In white-box cryptography, ensuring the integrity and randomness of navigation data used to generate random values is crucial, as attackers can control the system and tamper with software, compromising key distribution and cryptographic functions, leading to vulnerabilities in digital rights management systems.

Innovation Solution

A method and system that verify the integrity of navigation data from a GNSS using an integrity device, ensuring the data is not spoofed, and calculate the entropy of random samples to ensure sufficient randomness, encrypting or hashing these samples with a secret key for secure use in white-box cryptography operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If navigation data is used to generate random values in white-box cryptography, then randomness is improved, but integrity and susceptibility to spoofing deteriorate

Engineering Contradiction:
Improverandomness qualityVSAvoidspoofing vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

An integrity device is introduced as an intermediary between the navigation data source and the random value generation process. This device verifies the integrity of navigation data using authentication codes and timestamps, ensuring that only authenticated data contributes to random value generation, thereby preventing spoofing while maintaining randomness quality

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary integrity verification of navigation data before using it to generate random values. By checking authentication codes and timestamps in advance, the system ensures data integrity is confirmed prior to cryptographic use, preventing compromised data from affecting randomness

Inventive Principle:
Principle #10Preliminary action

2Reliability

If entropy calculation is performed on random samples, then randomness verification is improved, but processing time increases

Engineering Contradiction:
Improverandomness verificationVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system calculates entropy as a specific parameter to quantify and verify randomness quality. By using entropy calculation as a measurable parameter, the system can objectively verify randomness without requiring more complex or time-consuming verification methods

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The system performs entropy calculation on a sufficient number of random samples to ensure verification reliability. By processing an appropriate quantity of samples, the system achieves reliable randomness verification without performing excessive processing that would unnecessarily increase time consumption

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If encryption or hashing is applied to random samples with a secret key, then security is improved, but computational complexity increases

Engineering Contradiction:
Improvecryptographic securityVSAvoidcomputational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system replaces physical or manual security mechanisms with cryptographic operations (encryption or hashing) using secret keys. This substitution provides strong security guarantees through mathematical principles rather than relying on complex physical security measures, achieving high security with manageable computational requirements

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentEP2884689B1Random data from GNSS signals and secure random value provisioning for secure software component implementations
Publication Date: 2020.10.14 NXP BV
  • EP2884689B1 patent drawingFigure 1
  • EP2884689B1 patent drawingFigure 2
  • EP2884689B1 patent drawingFigure 3

AI summary

A method for verifying the integrity of navigation data used to produce random values for a white-box cryptography system including: receiving information from a navigation system; verifying the integrity of the received navigation information; extracting random information from the received navigation information; and performing a white-box cryptography operation using the extracted random information. Also, a method for determining that the random information samples used to produce random values for a white-box cryptography system have sufficient entropy, including: determining a number of random samples to initially collect; collecting the number of random samples from an external random number generator; calculating the entropy of the collected random samples; encrypting or hashing the collected random samples using the white-box cryptography system and a secret key; and performing a white-box cryptography operation using the encrypted collected random samples.