Identifier-Based Key Exchange Without PQC Certificates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The performance degradation and increased complexity of Post-Quantum Cryptography (PQC) algorithms due to the use of certificates result in inefficient key exchange processes.
Innovation Solution
A method and device for exchanging keys without certificates, utilizing identifier-based key generation and encryption techniques to generate session keys through public and secret keys, reducing computational resources and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If certificates are used in PQC key exchange, then security is improved, but device complexity and computational overhead increase
Solution Approach 1:
The patent extracts and removes the certificate component from the key exchange process. Instead of using traditional certificate-based authentication, the system directly exchanges public keys between devices. This eliminates the need for certificate validation, certificate storage, and certificate management infrastructure, thereby reducing device complexity and computational overhead while maintaining security through direct public key verification
Solution Approach 2:
The patent introduces a key exchange mediator that facilitates direct public key sharing between devices without requiring certificates. The mediator enables devices to establish secure communication by exchanging public keys through a trusted channel, eliminating the need for complex certificate validation processes while maintaining security
2Reliability
If certificates are used in PQC key exchange, then authentication is improved, but productivity and processing speed decrease
Solution Approach 1:
The patent removes certificate validation steps from the key exchange process. By directly exchanging public keys without certificate verification, the system significantly reduces processing time and computational resources required for authentication, thereby improving productivity and processing speed while maintaining authentication security
Solution Approach 2:
The patent performs preliminary key pair generation and public key distribution before the actual communication session. This preliminary action allows devices to have public keys ready for immediate exchange, eliminating the need for time-consuming certificate validation during the communication process and thereby improving processing speed
3Reliability
If PQC algorithms use large key lengths, then security is improved, but use of energy and computational resources increase
Solution Approach 1:
The patent extracts and eliminates the need for certificate-based authentication, which would require additional computational resources for validation. By using direct public key exchange, the system reduces the total computational load while maintaining security through appropriately sized PQC keys
Solution Approach 2:
The patent optimizes key length parameters to balance security and computational efficiency. By carefully selecting key lengths that provide adequate security without excessive size, the system reduces energy consumption and computational resource usage while maintaining strong security posture
Data Source
AI summary
According to an aspect of the present disclosure, there is provided a method for exchanging a key. The method being performed by a first communication device related to a first user, the method may comprise acquiring a first public key using an identifier of a second user, encrypting first data using the first public key, transmitting a second public key and the encrypted first data to a second communication device related to the second user, receiving encrypted second data and encrypted third data from the second communication device, decrypting the encrypted second data using a first secret key generated based on an identifier of the first user, decrypting the third data using a second secret key related to the second public key and generating a session key for communication with the second communication device, using the decrypted first data, second and third data.