Identity-Based Key Update for Compromised Push-to-Talk Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key management schemes for communication devices, such as MIKEY-SAKKE, do not have mechanisms to handle security-compromised devices, leading to insecure communication in push-to-talk groups until the next scheduled key renewal period.
Innovation Solution
A method and system for updating identity-based cryptographic private keys in communication devices, where a server determines a new user identifier and corresponding cryptographic key based on an compromised device's identifier, and distributes the new key to associated non-compromised devices, enabling immediate secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If periodic key renewal is used to enhance security, then security is improved, but communication continuity is worsened when devices are compromised
Solution Approach 1:
The system performs preliminary key renewal actions when a device is compromised, before the next scheduled key renewal period. The server detects the compromised device and triggers immediate key generation and distribution to affected devices, preventing the security gap that would otherwise exist until the next periodic renewal cycle.
Solution Approach 2:
The system implements a feedback mechanism where compromised devices report their status to the server, which then propagates the compromise information to other devices in the communication network. This feedback loop enables the system to respond dynamically to security incidents and perform immediate key renewal across the network.
2Device complexity
If no key revocation mechanism is implemented, then device complexity is reduced, but security reliability is worsened when devices are compromised
Solution Approach 1:
The server acts as an intermediary that handles the complex key management operations. Individual compromised devices simply report their status to the server, which then manages the key generation, distribution, and revocation processes centrally. This intermediary approach simplifies the overall system architecture while maintaining robust security.
Solution Approach 2:
The server performs multiple functions: it monitors device security status, generates new cryptographic keys, distributes them to affected devices, and manages revocation lists. This multi-functional approach consolidates key management operations into a single system component, reducing overall system complexity while enhancing security capabilities.
3Reliability
If immediate key renewal is implemented for compromised devices, then security is improved, but system complexity is increased
Solution Approach 1:
Compromised devices perform self-reporting by automatically detecting their compromised state and notifying the server without requiring manual intervention. The server then autonomously generates and distributes new keys to affected devices, enabling the system to self-correct security incidents without complex manual management procedures.
Data Source
AI summary
Method, server, and communication device for updating identity-based cryptographic private keys of compromised communication devices. One method includes receiving, at a server, a security status indicating that the security of a first communication device has been compromised. The first communication device is associated with a user and includes a first identity-based cryptographic private key and a first user identifier. The method also includes, responsive to receiving the security status, determining, with the server, a second user identifier based on the first user identifier. The method further includes determining, with the server, a second identity-based cryptographic private key based on the second user identifier. The method also includes distributing, via the server, the second identity-based cryptographic private key to a second communication device. The second communication device is associated with the user.