Group Handshake Procedure for Secure Key Establishment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing session keys for group communication is cumbersome and inefficient, especially as the number of group members grows, requiring each member to perform pairwise handshaking procedures with every other member and distribute session keys, leading to a complex and resource-intensive process.
Innovation Solution
A method and device for establishing a group temporal key through a handshake procedure using a shared group key, group key identifier, and group identifier, where a handshake initiator generates a group temporal key identifier and sends an initiating message to other members, who respond with random numbers, allowing the calculation of a group temporal key using a key derivation function, simplifying the process by reducing the need for pairwise handshakes and multiple session keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If pairwise handshake procedures are used for each group member, then secure communication between individual members is achieved, but the complexity and time required for key establishment increases significantly as group size grows
Solution Approach 1:
The patent merges multiple pairwise handshake procedures into a single group handshake procedure. Instead of requiring each member to perform separate handshakes with every other member, all group members participate in one unified handshake process that establishes a common group temporal key for all participants, thereby reducing procedural complexity while maintaining security.
Solution Approach 2:
The group temporal key established through the unified handshake procedure serves multiple functions simultaneously: it enables secure communication between all pairs of group members without requiring separate pairwise keys, and it can be used for both unicast and multicast communications within the group, reducing the overall number of key management operations needed.
2Reliability
If pairwise handshake procedures are executed between all group members, then individual session keys are established, but the time required for key establishment increases with the square of the number of members
Solution Approach 1:
The patent combines multiple sequential pairwise handshake operations into a single parallel group handshake operation. All group members exchange messages and contribute random numbers simultaneously in one handshake sequence, reducing key establishment time from O(n²) complexity to O(n) complexity where n is the number of group members.
3Reliability
If multiple session keys are distributed to group members, then secure individual communication is enabled, but the number of messages required for key distribution increases significantly
Solution Approach 1:
The patent merges multiple key distribution messages into a single group temporal key distribution. Instead of requiring separate message exchanges for distributing session keys between each pair of members, the unified handshake procedure distributes one group temporal key to all members through a single coordinated message exchange process, significantly reducing the total number of messages required.
4Reliability
If each member performs separate pairwise handshakes, then individual pairwise temporal keys are created, but the overall system efficiency decreases as group size increases
Solution Approach 1:
The patent merges multiple separate pairwise key establishment operations into a single group temporal key establishment operation. This unified approach maintains the security properties of pairwise key establishment while improving efficiency by eliminating redundant computational and communication overhead that would otherwise scale quadratically with group size.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
The invention discloses a solution for establishing by a handshake procedure a group temporal key for group communication. The group temporal key is established by a group procedure and is a group-specific temporal key.