Key Update via Trusted Execution Environment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing key updating process in electronic terminals is insecure due to the reliance on an original key that may expire or be disclosed, compromising the validity and security of the new key when encrypted with the original key.
Innovation Solution
A key updating method utilizing a Trusted Execution Environment (TEE) system to generate new private and public keys, perform signature processing, and send verified signature information to an operation server for secure storage, ensuring the new key's validity and security by using an upper-level private key for verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the terminal encrypts the new key by using the original key during key updating, then the key updating process is simple, but the security and validity of the new key cannot be ensured when the original key expires or is disclosed
Solution Approach 1:
The patent introduces a certificate authority (CA) public key as an intermediary for encryption. Instead of directly encrypting the new key with the original key, the system uses the CA public key to encrypt the new key, and the CA private key to sign and verify the encryption. This intermediary mechanism ensures that even if the original key is compromised, the new key's security is protected by the independent CA key pair.
Solution Approach 2:
The patent replaces the direct key-based encryption mechanism with a certificate-based public key infrastructure (PKI) system. The mechanical process of encrypting with the original key is substituted with a more complex but secure process involving CA public key encryption and digital signature verification, transforming the security model from trust-based to verification-based.
2Productivity
If the terminal sends the encrypted new key to the operation server for storage, then the key updating process is straightforward, but the security is compromised when the original key is disclosed
Solution Approach 1:
The CA private key acts as an intermediary for signing the encrypted new key. The operation server verifies the signature using the CA public key before accepting the new key. This intermediary verification mechanism ensures that the server can validate the new key's authenticity without relying on the original key, maintaining both efficiency and security.
Solution Approach 2:
The system implements a feedback mechanism where the operation server verifies the digital signature of the encrypted new key using the CA public key. If the verification succeeds, the server accepts and stores the new key; otherwise, it rejects the update. This feedback loop ensures security validation while maintaining processing efficiency.
Data Source
AI summary
A key updating method includes receiving, by a terminal, a key updating notification sent by an operation server, generating, by the terminal, a new private key and a new public key using a trusted execution environment (TEE) system of the terminal, storing the new private key in the TEE system, performing signature processing on the new public key using an upper-level private key of the new private key to obtain to-be-verified signature information, and sending, by the terminal to the operation server, a storage request carrying a device identifier of the terminal, the new public key, and the to-be-verified signature information.