IoT Secure Communication Key Derivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure communication methods for IoT connected objects are resource-intensive and unsuitable for devices with limited computing power, leading to high energy consumption and inadequate end-to-end security.
Innovation Solution
A secure communication method using symmetric encryption, key generation, and key derivation processes, where entities encrypt content with a specific key, aggregate key parameters, and manage keys through a manager entity to facilitate efficient and flexible secure data exchange.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TLS or DTLS protocols are used for secure communication, then data security and integrity are improved, but resource consumption and energy usage increase significantly
Solution Approach 1:
The patent segments the key management process into two parts: a centralized key generation authority that creates master keys, and individual devices that derive session keys from these master keys using device-specific parameters. This segmentation allows lightweight devices to perform simple key derivation operations rather than complex cryptographic protocols, significantly reducing their energy consumption while maintaining security.
Solution Approach 2:
The patent introduces a key generation authority as an intermediary entity that performs the computationally intensive key generation operations. Individual devices only receive pre-computed master keys and perform simple derivation operations. This intermediary approach shifts the computational burden from resource-constrained devices to a more powerful centralized system, reducing device energy consumption while maintaining end-to-end security.
2Reliability
If complex cryptographic calculations are performed on embedded devices, then security is improved, but computing resources and calculation time are consumed
Solution Approach 1:
The patent extracts the complex cryptographic key generation functionality from individual embedded devices and concentrates it in a centralized key generation authority. Individual devices only perform simple key derivation operations using their device-specific parameters, eliminating the need for complex cryptographic libraries and heavy computational resources on the devices themselves while maintaining strong security.
Solution Approach 2:
The patent changes the computational parameters by using simple key derivation operations instead of complex cryptographic protocols on devices. The security is maintained through the use of device-specific parameters that are combined with master keys in a simple derivation function, achieving security without requiring complex calculations on resource-constrained devices.
3Reliability
If end-to-end security is implemented using traditional protocols, then data integrity is improved, but network bandwidth and hardware resources are consumed
Solution Approach 1:
The patent performs key generation and distribution as preliminary actions before actual data communication. Master keys are pre-computed and distributed to devices, and session keys are pre-derived from these master keys. This preliminary key setup eliminates the need for complex key exchange protocols during actual data transmission, reducing bandwidth consumption while maintaining end-to-end security and data integrity.
Data Source
Figure 1
Figure 2~4
Figure 5
AI summary
Secure communication method (100) between at least one first entity and at least one second entity with a communication link in at least one network comprising: -a step of encryption, by the first entity, using a symmetric encryption algorithm, of content using a first key belonging to the first entity; -a step of aggregation, in a message, of encrypted content with at least one key generation parameter belonging to the first entity; -a step of sending, by the first entity, the message to the the second entity; -a step of determination, by the second entity, of the first key belonging to the first entity using said key generation parameter belonging to the first entity, of a first secret known by the second entity, and of a key generating function; -a step of decryption, by the second entity, using the first key, of the encrypted content of the message received.