Key Management Device Automating Key Storage and Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional key management devices for data encryption/decryption are inconvenient due to the need for users to manually manage and store multiple keys, requiring knowledge of storage locations, which complicates key addition, retrieval, and deletion.
Innovation Solution
A key management device and processor chip that utilize a control circuit, SRAM, and OTP memory to create, read, and delete keys, with a key lookup table managing metadata such as key size, owner, security level, and storage location, allowing for automated key storage and retrieval without user knowledge of storage locations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional key management method is used where users manually manage and store multiple keys, then key storage capability is provided, but user convenience deteriorates due to the need to know and remember storage locations
Solution Approach 1:
The patent introduces a key management device as an intermediary between the user and the key storage system. This device includes a control circuit that automatically manages key storage locations, a key lookup table that maps key identifiers to storage addresses, and a processor chip that executes key management operations. The intermediary abstracts away the complexity of manual key management while providing automated key storage, retrieval, and deletion functions.
Solution Approach 2:
The key management device enables self-service by automatically performing key management tasks without requiring user intervention for location tracking. The control circuit autonomously handles key storage by allocating memory addresses, updating the key lookup table, and managing the key database. This self-service mechanism eliminates the burden of manual key management while maintaining secure key storage capabilities.
2Adaptability or versatility
If the number of keys is increased to meet encryption needs, then encryption capability is improved, but key management burden increases considerably
Solution Approach 1:
The key management device provides multi-functional capabilities to handle diverse key management requirements. The control circuit can perform multiple operations including key storage, key retrieval, key deletion, and key lookup table management. The device supports a large number of keys through the key database structure, which can store key data in memory or external storage. This universal design allows the system to adapt to various encryption scenarios while maintaining ease of key management through centralized control.
Solution Approach 2:
The key management device acts as an intermediary that handles the complexity of managing large numbers of keys. The control circuit automatically manages key allocation, storage location tracking, and retrieval operations. The key lookup table serves as an intermediary data structure that maps key identifiers to storage addresses, enabling efficient key access without requiring users to manually track storage locations. This intermediary mechanism scales well to support large numbers of keys while maintaining user convenience.
3Productivity
If manual key storage location tracking is required, then key retrieval is possible, but time consumption increases for key operations
Solution Approach 1:
The key management device performs preliminary actions by pre-establishing the key lookup table that maps key identifiers to storage addresses. When a key is stored, the control circuit automatically allocates a memory address and updates the lookup table in advance. This preliminary organization of key storage information enables rapid key retrieval operations, as the system can directly access stored keys using the pre-computed addresses from the lookup table without requiring sequential search or manual location tracking.
Solution Approach 2:
The control circuit performs self-service by automatically managing key storage location tracking and update operations. When keys are stored, retrieved, or deleted, the control circuit autonomously updates the key lookup table and key database without requiring user intervention. This self-service mechanism significantly reduces the time required for key operations, as the system handles location management internally through efficient data structures and automated procedures.
Data Source
AI summary
A key management device for data encryption/decryption is provided. The key management device includes a static random-access memory (SRAM), a register, and a control circuit. The control circuit can set a key lookup table in the SRAM or the register, and manage a key database. The key database includes the SRAM and an one-time programmable (OTP) memory disposed outside the key management device, and the key database stores at least one key. The key lookup table includes a key number and metadata of each of the at least one key stored in the key database. According to a specific key number contained in a key read command or a key delete command from the processor, the control circuit reads or deletes a specific key corresponding to the specific key number in the key database.