Dynamic Key Rotation in NFC Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Near Field Communication (NFC) systems face security vulnerabilities due to the potential for brute force attacks and abrupt discontinuity in communication when the same key is used for a large number of data frame exchanges, leading to compromised confidentiality and integrity.
Innovation Solution
A method and system for dynamically changing encryption keys during data exchange in NFC networks, using a processor to select and replace keys based on predefined criteria, such as the number of data frames exchanged or elapsed time, while maintaining continuous communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the same key is used for a large number of data frame exchanges, then communication continuity is maintained, but security is compromised due to brute force attacks
Solution Approach 1:
The patent implements dynamic key changing during data frame exchanges. Instead of using a static key throughout communication, the system periodically updates the encryption key based on predetermined criteria such as number of frames exchanged or elapsed time. This dynamic adaptation maintains communication continuity while enhancing security by preventing brute force attacks that rely on key repetition.
Solution Approach 2:
The patent employs periodic key replacement mechanisms where encryption keys are changed at regular intervals or after a predetermined number of data frames. This periodic action creates multiple key epochs during communication, ensuring that even if one key is compromised, the damage is limited to that specific epoch, thus maintaining both continuity and security.
2Device complexity
If the same key is used for data frame exchanges, then encryption overhead is minimized, but data integrity is compromised due to replay attacks
Solution Approach 1:
The system dynamically adjusts key usage based on communication state and predetermined criteria. By implementing conditional key replacement rather than continuous key changes, the patent minimizes encryption overhead while still providing sufficient key variation to prevent replay attacks. The dynamic approach allows the system to balance security requirements with processing efficiency.
Solution Approach 2:
The patent changes cryptographic parameters (encryption keys) based on communication conditions such as frame count or time elapsed. This parameter change strategy ensures that keys are updated only when necessary, reducing the computational overhead of frequent key management while maintaining adequate security against replay attacks through periodic parameter variation.
3Object-affected harmful factors
If keys are changed frequently, then security against brute force attacks is improved, but communication discontinuity occurs
Solution Approach 1:
The patent implements periodic key changes at predetermined intervals rather than frequent or random changes. This periodic approach ensures that security is maintained through regular key updates while avoiding communication discontinuity by planning key transitions in advance and ensuring proper handover between key epochs.
Solution Approach 2:
The system performs preliminary key establishment and negotiation before data transmission begins, and plans key replacement points in advance during communication. This preliminary action ensures that key changes are smoothly coordinated between devices, preventing communication discontinuity while maintaining security through regular key updates.
4Object-affected harmful factors
If keys are changed during data exchange, then security is enhanced, but communication pause occurs
Solution Approach 1:
The patent schedules key changes to occur at predetermined intervals or after a set number of frames, allowing both devices to anticipate and prepare for key transitions. This periodic planning enables smooth key handover without unexpected pauses, as both transmitter and receiver are synchronized on when key changes will occur.
Solution Approach 2:
The system negotiates and agrees upon key replacement criteria and timing in advance during the communication setup phase. This preliminary agreement ensures that when key changes occur during data exchange, both devices are prepared and can transition seamlessly without communication pauses, as the key change schedule was predetermined and coordinated.
Data Source
AI summary
Disclosed is a method for secure communication between a plurality of electronic devices in a Near Field Communication (NFC) network, and a system for supporting the method. To this end, a first electronic device shares a plurality of keys with the at least one device among the plurality of electronic devices and selects a first key among the plurality of keys and exchanges data encrypted based on the first key with the at least one device among the plurality of electronic devices and replaces the first key with at least one key among the plurality of keys while exchanging the data after at least one predetermined criterion has been satisfied.


