Group Key Encryption for RFID Privacy Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Symmetric cryptographic systems in RFID and other communication systems face security risks due to the transmission of cryptographic parameters like Initialization Vectors (IVs), which can reveal user identity or compromise privacy if intercepted.
Innovation Solution
The use of a Group Key to encrypt privacy-sensitive information and cryptographic parameters, including IVs, using symmetric algorithms like AES in modes that do not require an IV, such as Electronic Code Book (ECB) mode, ensures that these parameters are not transmitted in plaintext, thereby maintaining user privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cryptographic parameters like Initialization Vectors are transmitted in plaintext to enable decryption, then communication functionality is maintained, but user privacy and identity are compromised if intercepted
Solution Approach 1:
The patent applies preliminary action by pre-distributing group keys to multiple devices before actual communication occurs. This allows devices to encrypt their cryptographic parameters (like IVs) with these pre-shared group keys, so that when parameters are transmitted, they are already protected. The decryption device uses its corresponding group key to decrypt the parameters before use, maintaining communication functionality while preventing privacy compromise during transmission.
2Object-affected harmful factors
If cryptographic parameters are encrypted using a Group Key before transmission, then user privacy is protected, but additional encryption steps and key management complexity are introduced
Solution Approach 1:
The patent applies universality by using a single group key to protect multiple different cryptographic parameters (such as different Initialization Vectors) from the same or different devices. Instead of requiring individual encryption keys for each parameter, the same group key serves multiple encryption purposes. This reduces key management complexity compared to having unique keys for each parameter, while still providing privacy protection for all transmitted cryptographic parameters.
Data Source
AI summary
A method for updating a group encryption key association, the method includes receiving an encrypted group key from a second device, where the group key has been encrypted using a device key of a first device. The method further includes, in the first device, using the group key to encrypt an input vector, transmitting the encrypted input vector, encrypting privacy-sensitive information using a device key, an encryption algorithm, and the input vector, and transmitting the encrypted privacy-sensitive information to the second device.