Key Derivation for Secure Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing content encryption systems face challenges in managing multiple encryption keys for both main content and additional information, leading to increased data length and management costs, as well as exposure risks when using different keys, particularly in consumer electronic devices with limited storage capacity.
Innovation Solution
An information transmission and reception system that uses a single encryption key for the main content and derives a second key using an irreversible function for the additional information, allowing only the first key to be transmitted, thereby reducing exposure risks and data length.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If different encryption keys are used for main content and additional information, then the risk of key exposure is reduced, but the data length increases proportionally to the number of keys
Solution Approach 1:
The encryption key management is segmented into a master key and multiple derived keys. The master key is stored in a key file, while separate derived keys are generated for encrypting main content and additional information. This segmentation allows the system to maintain multiple encryption keys without proportionally increasing the key file size, as only the master key needs to be stored.
Solution Approach 2:
A master key acts as an intermediary between the key storage system and multiple encryption operations. Instead of storing multiple separate encryption keys, the system uses the master key as a mediator to derive the necessary encryption keys through a key derivation function, thereby reducing the data length while maintaining security.
2Reliability
If multiple encryption keys are stored in a key file, then different keys can be used for content and additional information, but the management cost increases
Solution Approach 1:
Multiple encryption key functions are merged into a single master key stored in the key file. The master key combines the security function for both main content and additional information encryption, reducing key management complexity while maintaining the ability to use different derived keys for different encryption purposes.
Solution Approach 2:
The master key in the key file serves multiple functions: it can derive encryption keys for main content, derive encryption keys for additional information, and potentially serve as a basis for future key derivation needs. This multi-functionality reduces the need for separate key files and simplifies key management.
3Length of stationary object
If the same encryption key is used for main content and additional information, then the key file size remains small, but the encryption key can be easily inferred from encrypted data
Solution Approach 1:
The system performs preliminary key derivation before encryption operations. A master key is first established and stored in the key file, then separate encryption keys are derived from this master key through a key derivation function. This preliminary action ensures that the actual encryption keys used for content and additional information are different, preventing easy inference while keeping the key file size small.
Data Source
AI summary
Described herein is an information transmission apparatus for encrypting and transmitting first data and second data, the information transmission apparatus including: encryption element for deriving a second key from a first key by using an irreversible function, encrypting the first data by using the first key to generate encrypted first data and encrypting the second data by using the second key to generate encrypted second data; and transmission element for transmitting the encrypted first data, the encrypted second data and the first key.