IoT Key Sharing via Distributed Pairing Computation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key sharing protocols face challenges in achieving secure key management and processing efficiency, particularly for IoT devices with low processing capabilities, as they require either secure storage with limited processing power or additional devices for key processing, leading to potential delays in key sharing.
Innovation Solution
A key sharing system that employs pairing computation using multiple private keys, where one device generates and stores a private key locally and another device, with higher processing capabilities, performs calculations for shared values, enabling secure key sharing without degrading processing time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If private key is saved in tamper-resistant secure storage area, then security against key leakage is improved, but processing time increases due to limited calculation capability
Solution Approach 1:
The patent divides the private key into multiple parts (first private key and second private key) and distributes them across different devices. The first private key is stored in the tamper-resistant storage area of the IoT device, while the second private key is stored in the cloud server. This segmentation allows the system to achieve both security (through distributed storage) and processing efficiency (by enabling parallel computation of shared values without requiring both keys to be present in a single device with limited processing power).
Solution Approach 2:
The cloud server acts as an intermediary that holds the second private key and participates in the key sharing computation. By involving the cloud server as an intermediary with higher processing capabilities, the system can perform complex pairing computations that would be too time-consuming for the IoT device alone, thus reducing processing time while maintaining security through the distributed key architecture.
2Reliability
If multiple private keys are used, then security against spoofing is improved, but device complexity increases
Solution Approach 1:
The patent segments the private key into multiple components (first private key DA,1 and second private key DA,2) that are distributed across different devices. This segmentation enables the use of multiple private keys for enhanced security against spoofing while distributing the complexity management across the network rather than concentrating it in a single device.
Solution Approach 2:
The system creates copies of the private key in different locations (first private key in IoT device, second private key in cloud server). These copies are used independently in the key sharing protocol to generate shared values, providing security through redundancy while managing complexity through standardized copying and distribution procedures.
Data Source
AI summary
A key sharing system that generates a shared key that is used to perform encrypted communication between a first device and a second device according to an authenticated key sharing protocol, at least one device of the first device and the second device including: calculation means for calculating a shared value σj of shared values σi (i=1, . . . , n) that are used to generate the shared key, the shared value σj being calculated through pairing computation, using a private key DA,1 as an input; entrusting means for entrusting an information processing apparatus that is connected to the device via a network, with calculation of a shared value σk (k≠j) of the shared values σi (i=1, . . . , n), the shared value σk being calculated through pairing computation, using a private key DA,2 as an input; and key generation means for generating the shared key, using the shared value σj calculated by the calculation means and the shared value σk calculated by the information processing apparatus.