Secure Wireless Link via Hashed Symmetric Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communication systems face security concerns, particularly in mobile devices, where sharing cryptographic secrets securely and authentically without IT administrator intervention is challenging, and there is a need to verify shared secrets without exposing them to unauthorized parties.
Innovation Solution
A system utilizing a smart card reader and mobile device to establish a secure communication link by generating symmetric keys through a combination of public key and symmetric key algorithms, hashing functions, and a bootstrapping process, ensuring secure key generation and usage without exposing the secret to third parties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic techniques are employed to secure wireless communication links, then security against attacks is improved, but the complexity of key sharing and authentication processes increases
Solution Approach 1:
The patent introduces a trusted third party (authentication server) as an intermediary to facilitate secure key sharing between mobile devices. This mediator handles the complex cryptographic operations centrally, allowing devices to authenticate each other without requiring them to manage complex key exchange protocols independently, thus reducing device complexity while maintaining security
Solution Approach 2:
The system performs preliminary authentication and key establishment actions before actual communication begins. The authentication server pre-establishes trusted relationships and generates initial keys during a setup phase, so that when devices need to communicate, the complex cryptographic processes are already in place, simplifying the ongoing communication process
2Reliability
If symmetric-key systems are used with a single common cryptographic key, then security is improved, but the risk of key exposure and unauthorized access increases
Solution Approach 1:
The patent segments the single common key into multiple device-specific keys. Each mobile device has its own unique key pair (public and private), and the authentication server maintains separate keys for different device groups. This segmentation ensures that if one key is exposed, others remain secure, reducing the harmful impact of key exposure while maintaining the efficiency of symmetric encryption for each device's communications
Solution Approach 2:
The system implements local key management where each device stores and uses its own private key locally, never exposing it to others. The authentication server maintains local copies of device keys separately. This local quality approach ensures that key exposure at one device doesn't compromise the security of other devices, reducing overall key exposure risk while maintaining secure communication
3Reliability
If public-key systems are used with private and public key pairs, then key sharing security is improved, but the complexity of key distribution and verification increases
Solution Approach 1:
The authentication server acts as an intermediary that handles the complex public key distribution and verification processes. Instead of devices manually exchanging and verifying public keys, the server centrally manages key distribution, validating certificates and establishing trusted relationships, thus reducing the complexity of key distribution while maintaining the security benefits of public-key cryptography
Solution Approach 2:
The authentication server provides universal key management services for multiple devices and communication scenarios. It handles key generation, distribution, verification, and rotation for different device types and communication protocols, simplifying the key distribution process for each individual device while maintaining secure public-key operations across the entire system
4Ease of operation
If secrets are shared between devices without IT administrator intervention, then ease of operation is improved, but the risk of unauthorized access and security breaches increases
Solution Approach 1:
The authentication server serves as a trusted intermediary that enables autonomous key establishment between devices without requiring IT administrator intervention for each individual connection. The server pre-configures trusted relationships and provides automated authentication, allowing devices to securely share keys independently while the server maintains oversight to prevent unauthorized access and security breaches
Data Source
AI summary
A cryptographic key is used to secure a communication link between a first device and a second device. Generating the cryptographic key is accomplished by a) generating a first cryptographic key, b) generating a second cryptographic key, c) applying a hash function to packets transmitted over the communication link to create a hash result, and d) applying the hash function to the first cryptographic key, the second cryptographic key and the hash result.