Local Entropy Key Establishment for Secure App Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems require key exchange over networks, which consumes resources, complicates security, and makes the communication channel prone to compromise.
Innovation Solution
Applications independently generate identical private keys using data from common entropy sources, such as sensors, without network exchange, to establish secure communication channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network-based key exchange is used, then secure communication can be established, but resource consumption increases and security is compromised
Solution Approach 1:
The patent extracts the key exchange process from the network communication channel and performs it locally using entropy sources available on the device. By taking out the key generation process from network dependency, the system eliminates the security vulnerability of network-based key exchange while reducing resource consumption associated with network communication and key management protocols.
Solution Approach 2:
The system uses locally available entropy sources (sensors, system events) to generate cryptographic keys independently without requiring external key distribution services. This self-service approach to key generation eliminates dependency on network-based key exchange infrastructure, improving both security and resource efficiency.
2Reliability
If network-based key exchange is used, then cryptographic keys can be distributed, but the communication channel becomes prone to compromise
Solution Approach 1:
The patent removes the key exchange operation from the network communication channel and replaces it with local key generation using entropy sources. This extraction eliminates the attack surface associated with network-based key distribution, preventing man-in-the-middle attacks and other network-based compromises.
Solution Approach 2:
The system preemptively prevents key compromise by generating keys locally before any network communication occurs. By establishing keys in advance using secure local entropy sources, the system creates an initial security state that is immune to network-based attacks.
3Reliability
If applications exchange public keys over network, then secure channel can be established, but device resources are consumed
Solution Approach 1:
The patent extracts the key establishment process from network operations and implements it locally using device entropy sources. This eliminates the need for network transmission of public keys and associated protocol overhead, reducing resource consumption while maintaining secure communication capabilities.
Solution Approach 2:
Applications generate their own cryptographic keys using local entropy sources without requiring key distribution infrastructure. This self-service model eliminates resource consumption associated with key management services, certificate authorities, and network-based key exchange protocols.
Data Source
AI summary
Aspects of the present disclosure involve a system comprising a computer-readable storage medium storing a program and a method for performing operations comprising: accessing, by a first application implemented on a client device, data collected from one or more entropy sources; causing a second application implemented on the client device to access the data collected from the one or more entropy sources; generating a shared cryptographic key using the data collected from one or more entropy sources; establishing a communication channel between the first application and the second application; and exchanging, over the communication channel between the first application and the second application, one or more messages that have been encrypted using the shared cryptographic key.