Key Generation Device for Secure Encryption with Reduced Management Complexity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption technologies require encryption keys of the same length as the plaintext, leading to increased management complexity when dealing with multiple communication counterparts or long plaintexts, particularly in sensitive contexts like medical data storage, where information leakage poses significant risks.
Innovation Solution
A generating device that produces a server key and multiple client keys with correlated bit sequences, allowing for efficient key management by reducing the total bit length of the server key while maintaining security through adjustable correlations between client keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption keys of the same length as plaintext are used for information-theoretic security, then security is improved, but key management complexity increases when dealing with multiple communication counterparts or long plaintexts
Solution Approach 1:
The encryption key is divided into multiple segments (first key and second keys). The first key has a shorter length and is used to encrypt a header containing identifiers. The second keys are generated from the first key and used to encrypt the actual data. This segmentation allows the system to maintain information-theoretic security while reducing the burden of managing multiple full-length keys for different communication counterparts.
Solution Approach 2:
Multiple second keys are generated from a single first key through a key generation algorithm. These second keys are correlated with each other but can function independently for different communication counterparts. This copying approach allows the system to serve multiple communication counterparts using derivations from a single master key, significantly reducing key management complexity while maintaining security.
2Reliability
If encryption keys of the same length as plaintext are used, then information-theoretic security is ensured, but storage and management requirements increase for long plaintexts
Solution Approach 1:
The key structure is segmented into a first key and multiple second keys. The first key serves as a master key from which multiple second keys are derived. This segmentation allows the system to maintain information-theoretic security for long plaintexts while storing only one shorter master key instead of multiple full-length keys, thereby reducing storage requirements.
Solution Approach 2:
The system changes the parameter of key length by using a shorter first key to generate multiple second keys that are used for actual encryption. This parameter change allows the system to maintain the security level required for long plaintexts while reducing the storage burden by not needing to store multiple full-length keys.
Data Source
AI summary
According to an embodiment, a generating device includes a first key generator, a second key generator, and an output unit. The first key generator is configured to generate a first key according to a first key rule in which the first key is generated from a random number, the first key being a bit sequence. The second key generator is configured to generate a plurality of second keys according to a second key rule in which the second keys are generated from the first key, the second keys being bit sequences partly correlated to one another. The output unit is configured to output the first key and at least one of the second keys.