Local Key Management for Secure IoT Control Signals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for securing control signals in smart connected objects are vulnerable to interception and unauthorized access due to reliance on server-stored encryption keys, leading to a low level of security against man-in-the-middle attacks.
Innovation Solution
An electronic device generates and stores a set of encryption keys, transmitting them to a mobile device via short-range communication, and uses these keys for encrypting and decrypting control signals, ensuring each key is used only once and not stored on a server, thereby enhancing security through local key management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If encryption keys are stored on a remote server, then key management is centralized and simplified, but security is reduced due to vulnerabilities to interception and man-in-the-middle attacks
Solution Approach 1:
The patent extracts the encryption keys from the remote server environment and stores them locally in the electronic device's secure memory. This extraction eliminates the vulnerability to server-based attacks while maintaining key management functionality through local secure storage and usage.
Solution Approach 2:
The patent implements preliminary anti-action by generating and storing multiple pre-prepared encryption keys in the electronic device before any communication occurs. These keys are kept in secure local storage, preventing potential attackers from intercepting keys during transmission or accessing them through server vulnerabilities.
2Ease of operation
If the same encryption key is reused multiple times, then communication is simplified, but security is weakened due to possibilities of reproduction and utilization of the key
Solution Approach 1:
The patent implements dynamics by making the encryption key selection dynamic rather than static. The electronic device automatically selects different encryption keys from its local storage for each communication session or message, ensuring that even if one key is compromised, others remain secure. This dynamic key rotation maintains security while simplifying communication protocols.
Solution Approach 2:
The patent applies periodic action through regular key rotation and replacement. The electronic device periodically updates and rotates through multiple pre-stored encryption keys, ensuring that no single key is used indefinitely. This periodic key refresh prevents key reproduction attacks while maintaining streamlined communication.
3Adaptability or versatility
If encryption keys are transmitted over long range communication links, then remote communication is enabled, but security is compromised due to interception risks
Solution Approach 1:
The patent applies preliminary action by pre-generating and securely storing multiple encryption keys in the electronic device before any long-range communication takes place. This preliminary key preparation eliminates the need to transmit keys over vulnerable long-range channels, as all necessary keys are already securely present in the device's local storage.
Solution Approach 2:
The patent uses copying by creating multiple identical secure copies of encryption keys within the electronic device's secure local storage. Rather than transmitting keys over long-range communication links where interception is possible, the system copies keys locally and uses different copies for different communication sessions, maintaining security while enabling remote communication.
Data Source
AI summary
The present disclosure concerns an electronic device configured for generating a control signal for controlling another device in a secured fashion when receiving a command signal from a mobile device, the electronic device being further configured for generating and storing a set of keys that are used for encrypting the command signal between the electronic device and the mobile device, each key being used only once. The present disclosure further pertains to a method for generating the control signal in a secured fashion in accordance with the command signal using the electronic device.