Identity-Based Key Management for Multimedia Conferencing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multimedia communication systems lack scalable and secure key management solutions for the media plane, particularly in conferencing systems, with existing methods being non-scalable, lacking authentication, and requiring expensive public key infrastructure (PKI) for end-to-end privacy and group conferencing.
Innovation Solution
The implementation of an identity-based authenticated key agreement protocol using elliptic curve cryptography for secure key management, allowing for secure key exchange between parties in multimedia communication systems, including conferencing, with features like key forking, retargeting, deferred delivery, and lawful interception, without the need for constant PKI support.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If token based symmetric key methods are used with a key management server, then key distribution is simplified, but security is weakened due to potential key creation and distribution vulnerabilities
Solution Approach 1:
The patent introduces a key management server as an intermediary that facilitates key distribution without creating or storing actual communication keys. The server distributes key material that enables parties to generate their own secure keys, thus simplifying key distribution while maintaining security by avoiding central key storage.
2Reliability
If certificates and public key infrastructure (PKI) are used for end-to-end privacy, then authentication and security are improved, but infrastructure cost and complexity increase significantly
Solution Approach 1:
The patent extracts the essential authentication function from the complex PKI certificate system. Instead of using full certificates and public key infrastructure, the invention uses a simplified key agreement protocol that achieves authentication and security without requiring expensive and complex PKI management, thus removing unnecessary complexity while retaining core security benefits.
3Quantity of substance
If traditional key management systems are used, then key distribution is possible, but scalability for group conferencing is limited
Solution Approach 1:
The patent implements a dynamic key agreement mechanism where key material is distributed in a scalable manner that adapts to the number of parties. The system allows dynamic addition and removal of participants in group conferencing without requiring complete re-keying, thus improving scalability while maintaining secure key distribution for any number of parties.
4Ease of operation
If symmetric key methods are used, then key distribution is simplified, but authentication capability is reduced
Solution Approach 1:
The patent merges the advantages of symmetric key simplicity with asymmetric key authentication capabilities. The key management server distributes symmetric key material for efficient encryption, while simultaneously providing authentication functions through the key distribution mechanism itself, thus combining the benefits of both approaches without their respective drawbacks.
Data Source
Figure 1A
Figure 1B
Figure 2
AI summary
Principles of the invention provide one or more secure key management protocols for use in communication environments such as a media plane of a multimedia communication system. For example, a method for performing an authenticated key agreement protocol, in accordance with a multimedia communication system, between a first party and a second party comprises, at the first party, the following steps. Note that encryption/decryption is performed in accordance with an identity based encryption operation. At least one private key for the first party is obtained from a key service. A first message comprising an encrypted first random key component is sent from the first party to the second party, the first random key component having been computed at the first party, and the first message having been encrypted using a public key of the second party. A second message comprising an encrypted random key component pair is received at the first party from the second party, the random key component pair having been formed from the first random key component and a second random key component computed at the second party, and the second message having been encrypted at the second party using a public key of the first party. The second message is decrypted by the first party using the private key obtained by the first party from the key service to obtain the second random key component. A third message comprising the second random key component is sent from the first party to the second party, the third message having been encrypted using the public key of the second party. The first party computes a secure key based on the second random key component, the secure key being used for conducting at least one call session with the second party via a media plane of the multimedia communication system.