Securing Resting Data in IoT Devices via Remote Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Low-end internet connected devices lack physical security measures, making them vulnerable to nefarious access and data theft, especially when storing personal information, as they cannot prevent chip decapping and unauthorized data retrieval.
Innovation Solution
Implementing a system that uses symmetrical key cryptography to encrypt data stored in non-volatile memory, with decryption keys stored remotely and transmitted securely over an authenticated channel, and temporarily stored in volatile memory for use, making it difficult for attackers to access unencrypted data without also compromising the online identity and credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If low-end MCU devices are used for internet connected devices, then cost and ease of availability are improved, but physical security and data protection capability deteriorate
Solution Approach 1:
The patent introduces an intermediary authentication mechanism that verifies the device's identity and authorization status before allowing any data access, including physical access scenarios. This intermediary layer (authentication system) mediates between the attacker's physical access and the protected data, preventing unauthorized access even when the MCU is decapped.
Solution Approach 2:
The patent segments the security function by separating data storage from authentication. The low-end MCU only stores encrypted data, while authentication credentials and decryption keys are managed separately through remote servers and secure elements. This segmentation means that compromising the MCU's physical structure does not automatically grant access to the data.
2Ease of operation
If encryption keys are stored in the device, then data decryption capability is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent extracts the encryption keys from the device's local storage and places them in remote secure elements (such as HSMs - Hardware Security Modules). The device only stores encrypted data and has temporary access to keys during authenticated operations. This extraction eliminates the risk of attackers retrieving stored keys from the MCU's memory or storage.
Solution Approach 2:
The patent implements dynamic key management where keys are temporarily loaded into the device only when needed for decryption operations, after successful authentication. The keys are not permanently stored but are dynamically retrieved and invalidated, ensuring that even if the device is physically accessed, the keys are not available for extraction.
3Object-affected harmful factors
If physical security measures are added to devices, then data protection capability is improved, but device complexity and cost increase
Solution Approach 1:
The patent replaces physical security measures (such as secure chips, tamper-proof packaging, and hardware security elements built into the MCU) with a software-based authentication system. Instead of relying on physical security hardware, the system uses cryptographic authentication and remote verification to protect data, thereby avoiding the complexity and cost of adding physical security components to low-end devices.
4Object-affected harmful factors
If authentication mechanisms are implemented, then security against unauthorized access is improved, but system complexity increases
Solution Approach 1:
The patent uses a copy of the authentication mechanism that can be performed remotely without requiring complex hardware in the device itself. The authentication verification is copied to a remote server that can validate credentials and issue temporary access tokens. This allows the device to have simple authentication functionality while the complexity is shifted to a remote system that can handle multiple authentication requests concurrently.
Data Source
AI summary
An electronic device for securing information, and a method therefor are provided. The electronic device includes a receiver for receiving an encrypted data from a server, the encrypted data being encrypted with an encryption key by a key cryptography based on a private information, a nonvolatile memory for storing the encrypted data, a decryptor for receiving the encrypted data from the nonvolatile memory, decrypting the encrypted data into an unencrypted data including the private information, and a volatile memory for storing the unencrypted data. The receiver authenticates a communication channel and receives the encryption key through the authenticated communication channel, and the decryptor receives the encryption key from the receiver and decrypts the encrypted data with the encryption key.