IoT Randomness Verification via Secure Seed Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT devices lack secure randomness verification systems, leading to potential data leaks during network communication, as they often reuse seeds or use insecure methods for generating random numbers, compromising the security of data transmission.
Innovation Solution
A randomness verification system where a terminal generates and updates a secure seed, encrypts verification data using a common key shared with a verification server, and ensures secure data communication by regularly verifying the randomness of generated random numbers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a pseudo random number generator with a pre-incorporated seed is used in low-end IoT devices, then device cost and complexity are reduced, but security strength deteriorates due to seed reuse and predictable randomness
Solution Approach 1:
The patent applies preliminary action by incorporating a secure seed into the device before shipment and storing it in a secure memory unit that prevents external access. This pre-established secure foundation enables subsequent random number generation to maintain high security strength without requiring complex hardware random number generators in low-end devices.
2Measurement precision
If random number data is transmitted over the network for verification, then randomness can be verified by external devices, but data security deteriorates due to potential leakage during transmission
Solution Approach 1:
The patent introduces an encryption key as an intermediary mechanism. The random number data is encrypted using this key before network transmission, and only the verifying device that possesses the corresponding decryption capability can access the original data. This intermediary encryption layer prevents data leakage during transmission while enabling external verification.
Solution Approach 2:
The patent applies preliminary anti-action by pre-establishing secure communication channels through key exchange before transmitting random number data. The encryption key is securely shared between devices in advance, creating a protective barrier that prevents potential data leakage during subsequent transmissions.
3Reliability
If security measures are enhanced in low-end IoT devices, then security strength improves, but device cost and complexity increase
Solution Approach 1:
The patent extracts the complex random number generation hardware from low-end IoT devices and relocates it to a separate verifying device. The IoT device retains only a simple pseudo random number generator with a secure seed storage unit, while the complex verification and encryption functions are performed externally, reducing device complexity while maintaining security.
Solution Approach 2:
The patent enables self-service by allowing the IoT device to autonomously generate random numbers using its pre-incorporated secure seed and perform encryption using the established key. The device independently maintains its security functionality without requiring continuous external intervention or complex internal security systems.
Data Source
AI summary
A terminal exchanges a common key generated using a seed, the randomness of which was recognized in advance, with a verification server. The terminal generates verification data using a plurality of measured values from a noise source. The terminal encrypts the verification data with the common key and transmits the verification data to the verification server. The verification server verifies the randomness of verification data obtained by decrypting the encrypted verification data with the common key. When it is determined that the verification data has randomness, the verification server transmits a verification result indicating that the randomness of the verification data is recognized to the terminal. The terminal acquires a plurality of measured values and generates a new seed in accordance with the verification result from the server and preserves the new seed in a secure area.