Key Distribution System Using Public Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key distribution systems fail to securely and confidentially issue new communication secret keys to terminals, allowing unauthorized users to eavesdrop or misuse communication, as previous users can retain access to the communication secret key.
Innovation Solution
A key distribution system where the terminal generates a secret value, encrypts it with its public key, and sends it to the server, which decrypts it using its private key, then re-encrypts and returns the new communication secret key, ensuring only the server can decrypt and deliver it securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If common key cryptography is used to encrypt and distribute session keys, then encrypted communication can be established, but previous users can eavesdrop on communication and misuse the terminal
Solution Approach 1:
The patent changes the fundamental parameter of key distribution by switching from symmetric key cryptography to public key cryptography. This allows the terminal to generate a public-private key pair, where the public key can be freely shared with the server for secure key distribution, while the private key remains confidential to the terminal. This parameter change resolves the security vulnerability where previous users could access communication secrets.
Solution Approach 2:
The patent introduces a key distribution mechanism where the server acts as an intermediary. The terminal sends its public key to the server, which then uses this public key to securely receive and distribute session keys. This intermediary approach ensures that even if the communication channel is compromised, the session keys remain protected because they are encrypted with the terminal's public key that only the terminal can decrypt with its private key.
2Reliability
If public key cryptography is used to enhance security, then eavesdropping can be prevented, but secret key exchange becomes difficult
Solution Approach 1:
The server serves as a trusted intermediary that facilitates secret key exchange using public key cryptography. The terminal generates a public-private key pair and shares the public key with the server. The server then uses this public key to encrypt session keys before transmitting them to the terminal. This intermediary mechanism simplifies the key exchange process while maintaining the security benefits of public key cryptography.
Solution Approach 2:
The terminal performs preliminary action by generating and storing its public-private key pair before actual communication begins. The public key is pre-shared with the server, establishing a secure foundation for future key exchanges. This preliminary setup eliminates the need for complex real-time key negotiation while ensuring that all subsequent key exchanges are secure.
Data Source
AI summary
The key distribution system comprises a terminal and a server which establish encrypted communication with each other by use of a common key cryptography using a communication secret key. To issue a new communication secret key, the terminal generates a secret value and encrypts it with a public key and sends the encrypted secret value to the server. The server decrypts the encrypted secret value with a private key paired with the public key. The server issues the new communication secret key, and encrypts it with a common key cryptography using the secret value, and sends the encrypted new communication secret key to the terminal. The terminal decrypts the encrypted new communication secret key with the secret value, thereby obtaining the new communication secret key. Thereafter, the terminal and the server use the new communication secret key.