Cryptographic Data Processing via HSM Key Derivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for encrypting and decrypting software containers in control units are incomplete, as they require transmitting the secret key alongside encrypted data, compromising security due to its unsecured form.
Innovation Solution
A method that uses a public key infrastructure (PKI) and a tool environment to derive a secret key from a random number, encrypting the data and storing the random number within the software container, allowing secure transmission without the need to send the secret key, and utilizing a Hardware Security Module (HSM) for decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the secret key is transmitted alongside encrypted data in a software container, then the decryption process can be performed, but the security of the data is compromised due to the unsecured form of the key during transmission
Solution Approach 1:
The secret key is extracted from the transmission process and stored exclusively in the HSM. Only the encrypted data is transmitted in the software container, while the key remains isolated in the secure hardware module, eliminating the security risk of key transmission while preserving decryption capability through HSM-mediated access
Solution Approach 2:
The HSM acts as an intermediary between the encrypted data and the secret key. The decryption process is mediated by the HSM, which internally combines the transmitted encrypted data with the stored secret key to produce decrypted output, without requiring direct transmission or exposure of the key itself
2Reliability
If a Hardware Security Module (HSM) is used to store the secret key securely, then data security is improved, but the system complexity increases
Solution Approach 1:
The system is segmented into distinct functional components: the HSM responsible for secure key storage and decryption operations, and the external system responsible for data transmission and application logic. This segmentation isolates security-critical functions to a dedicated module, improving key security while allowing the main system to remain relatively simple
Solution Approach 2:
The HSM is self-contained with the secret key stored internally and never exported. The module autonomously performs decryption operations by internally combining its stored key with transmitted encrypted data, eliminating the need for complex key management infrastructure in the external system
Data Source
AI summary
In a method for cryptographically processing data which are exchanged between a first unit and a control unit, a derived key is used in this process, which is derived from a secret key and an identifier. The exchanged data are encrypted using the derived key, and the exchanged data are encrypted in a tool chain, which provides the identifier.