IoT Key Negotiation via Discovery Multicast
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing method for obtaining a session key in IoT devices is inefficient, leading to a high number of message exchanges and exposing device information, which increases the risk of attacks during the end-to-end negotiation process.
Innovation Solution
Integrating the key negotiation process into the discovery process by multicasting a discovery message with a public key, allowing IoT devices to encrypt device information using the session key, thereby reducing message exchanges and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If end-to-end negotiation is used to obtain session key, then security is ensured, but efficiency is low due to high number of message exchanges
Solution Approach 1:
The patent merges the key negotiation process with the device discovery process. The control device multicasts a discovery message containing a first public key, and the IoT device responds with a discovery response containing a first ciphertext and second public key. This integration allows session key establishment to occur during the discovery phase, reducing the number of separate message exchanges needed while maintaining security through encrypted communication.
2Reliability
If end-to-end negotiation is used to obtain session key, then security is ensured, but device information is exposed increasing attack risk
Solution Approach 1:
The patent applies preliminary action by establishing the session key during the discovery process before full communication begins. The control device generates and multicasts a first public key in the discovery message, and the IoT device uses this to encrypt its device information in the discovery response. This preliminary key establishment ensures that device information is encrypted from the outset, preventing exposure to attacks during subsequent communication.
3Reliability
If traditional key negotiation is used, then security is maintained, but number of message exchanges is high
Solution Approach 1:
The patent segments the communication process into integrated phases where discovery and key negotiation occur simultaneously. The discovery message contains the first public key, and the discovery response contains the first ciphertext and second public key. This segmentation allows the same message exchanges to serve dual purposes: device discovery and session key establishment, thereby reducing the total number of message exchanges required.
Data Source
AI summary
A key negotiation method and an electronic device are provided, and relate to the field of communications technologies. Specifically, the method includes: An IoT control device multicasts, in a first local area network, a discovery message that carries a first public key, and sends a second ciphertext to a first IoT device after receiving a first ciphertext and a second public key. After receiving a third ciphertext from the first IoT device, the IoT control device decrypts the third ciphertext based on a first session key, to obtain a second signature and second session information; verifies the second signature based on a long-term public key of the first IoT device; and performs encrypted communication with the first IoT device based on the first session key after the second signature is successfully verified.