Multi-Apparatus Key Generation for Secure Communication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional data obfuscation methods, such as the Diffie-Hellman key exchange method, are vulnerable to man-in-the-middle attacks, which can lead to fraudulent key acquisition and insufficient security if the key is compromised.

Innovation Solution

An information processing system that includes multiple apparatuses for authentication and key generation, where each apparatus authenticates others and shares data to generate a common key securely, using a preprocess to ensure secure communication and prevent impersonation, thereby enhancing security against fraudulent key acquisition.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional key exchange methods (e.g., Diffie-Hellman) are used, then key exchange can be performed, but the system is vulnerable to man-in-the-middle attacks and key fraudulention

Engineering Contradiction:

ImprovesecurityVSAvoidman-in-the-middle attack vulnerability

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The key generation process is segmented into multiple independent components (first data from second apparatus, second data from first apparatus, third data from third apparatus). Each component alone is insufficient for key generation, but all combined produce the final key. This segmentation prevents any single apparatus or attacker from obtaining the complete key material through interception alone.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The first information processing apparatus acts as an intermediary that distributes different data components to different parties. It authenticates the second and third apparatuses and coordinates the key generation process, ensuring that no single party can unilaterally control or compromise the key generation without detection.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If a key is fraudulently acquired, then data decryption becomes possible, but the obfuscated data security is compromised

Engineering Contradiction:

Improvedata securityVSAvoiddata decryption risk

Core Design Contradiction:

ReliabilityVSObject-generated harmful factors

Solution Approach 1:

The encryption key is segmented into multiple data components distributed across different apparatuses. Even if an attacker fraudulently acquires one or two components through interception or compromise, they cannot reconstruct the complete key without all components, thus preventing data decryption.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Authentication is performed preliminarily before key generation to verify the identities of the second and third apparatuses. This preliminary verification ensures that only authenticated parties can participate in key generation, preventing fraudulent apparatuses from injecting malicious data or compromising the key material.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If multiple apparatuses are involved in key generation, then security is enhanced, but the system complexity increases

Engineering Contradiction:

ImprovesecurityVSAvoidsystem structure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Each information processing apparatus is designed with multi-functional capabilities: they can act as both key material providers and key generators, perform authentication, and engage in secure communication. This universality reduces the need for specialized dedicated components for each function, thereby managing system complexity while maintaining enhanced security through multiple apparatuses.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS10491385B2Information processing system, information processing method, and recording medium for improving security of encrypted communications

Publication Date: 2019.11.26 ADIN RES

AI summary

An information processing system includes a first information processing apparatus, which authenticates second and third information processing apparatuses, acquires first data from the second information processing apparatus, and transmits second data indicating a method of generating a key from the first data, to the second and third information processing apparatuses; the second information processing apparatus, which transmits the first data to the first and third information processing apparatuses, acquires the second data from the first information processing apparatus, generates the key based on the first and second data, and communicates with the third information processing apparatus based on the key; and the third information processing apparatus, which acquires the first data from the second information processing apparatus, acquires the second data from the first information processing apparatus, generates the key based on the first and second data, and communicates with the second information processing apparatus based on the key.