Network Apparatus Power-Off Cryptographic Key Deletion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In network systems employing cryptographic communication methods, when a network apparatus loses cryptographic communication information due to rebooting or power cycles, it leads to unnecessary data transmission and increased processing burden, compromising security and communication efficiency.
Innovation Solution
A network apparatus detects the power-off sequence and sends a deletion command for cryptographic communication information before deactivating the power source, allowing for secure deletion and re-establishment of communication upon reboot, thereby preventing unnecessary data transmission and maintaining security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic communication information is stored in a nonvolatile storage medium to prevent loss during reboot, then the reliability of communication is improved, but the security of the communication is deteriorated due to increased risk of information leakage
Solution Approach 1:
The patent applies preliminary action by notifying the communication partner of the upcoming power-off before it occurs. This allows the partner to proactively delete cryptographic communication information from its storage, preventing both loss during reboot and potential security breaches from stored sensitive data. The notification is sent during the power-off sequence, enabling timely cleanup on the partner side.
2Use of energy by moving object
If the power source is turned OFF when not in use to reduce energy consumption, then the use of energy is improved, but the communication restoration becomes delayed and unnecessary data transmission increases
Solution Approach 1:
The patent eliminates communication restoration delays by implementing preliminary notification of power-off to the communication partner. This allows the partner to delete cryptographic information in advance, so when power is restored, communication can be immediately re-established without waiting for term-of-validity expiration or performing unnecessary data transmissions.
3Device complexity
If cryptographic communication information is not deleted before power-off, then the device complexity is reduced, but unnecessary encrypted data transmission increases the processing burden and network load
Solution Approach 1:
The patent addresses network efficiency by implementing preliminary notification of power-off to the communication partner. This triggers the partner to delete cryptographic communication information before the power-off occurs, preventing unnecessary encrypted data transmissions after reboot and reducing both processing burden and network load.
4Reliability
If malfunction notification is sent every time rebooting is conducted, then the communication reliability is improved, but the device complexity and processing burden are increased
Solution Approach 1:
The patent inverts the conventional malfunction notification approach by notifying the communication partner of power-off in advance, rather than notifying after reboot completes. This reversal allows the partner to proactively clean up cryptographic information, improving reliability while reducing the need for complex post-reboot notification protocols and malfunction handling procedures.
Data Source
Figure 1~2
Figure 3a~4
Figure 5
AI summary
Disclosed is a network apparatuses, which makes it possible to effectively re-establish the cryptographic communication without increasing its processing burden and deteriorating the security aspects of them. The network apparatus that communicates with another network apparatus through a network to exchange cryptographic communication information including a key of cryptograph transmits, when a power off sequence is detected, a request for deleting the cryptographic communication information to the other network apparatus through a communication interface section, before a power source section is turned OFF so as to actually deactivate the network apparatus.