One-Time Key Renewal Through Server-Mediated Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems face challenges in ensuring secure data exchange between devices due to increasing computing power, vulnerability to quantum computers, and the need for frequent key changes, which increases memory requirements and computational overhead.
Innovation Solution
A method for securing communication using one-time encryption keys shared between devices, where unused keys are managed by a server and dynamically updated, with registers on appliances and servers to organize and synchronize keys, and a protocol for key management and exchange.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If one-time encryption keys are used for securing data exchange between devices, then security is improved, but memory requirements and device complexity increase
Solution Approach 1:
A server is introduced as an intermediary to manage and distribute one-time encryption keys between devices. The server stores multiple keys and distributes them to communicating devices on demand, eliminating the need for each device to store all possible keys locally. This mediator approach maintains high security while reducing memory requirements at the device level.
Solution Approach 2:
Encryption keys are pre-generated and stored on the server before being needed for communication. When devices need to communicate securely, the server has already prepared the appropriate one-time keys and can distribute them immediately. This preliminary preparation ensures security is maintained without requiring devices to generate or store multiple keys in advance.
2Reliability
If one-time encryption keys are used for securing data exchange, then security is improved, but computational overhead increases
Solution Approach 1:
Encryption keys are pre-generated and prepared on the server before communication occurs. This preliminary action shifts the computational burden of key generation from individual devices to the server, reducing the real-time computational overhead at device level while maintaining the security benefits of one-time keys.
Solution Approach 2:
The server acts as a computational intermediary that handles the heavy lifting of key management. By centralizing key generation, storage, and distribution on the server, the computational overhead is consolidated in one location rather than being distributed across multiple devices, reducing the power requirements for each individual device.
3Reliability
If encryption keys are changed frequently to maintain security, then security is improved, but the time required for key management increases
Solution Approach 1:
Multiple encryption keys are pre-generated and stored on the server before they are needed. When communication between devices is initiated, the server can immediately distribute the appropriate pre-prepared one-time key without requiring time-consuming key generation or negotiation during the communication process. This maintains frequent key changes for security while minimizing key management time.
Data Source
AI summary
A method for securing communication within a system including at least one server and at least two appliances able to communicate with the server and with each other, wherein a pair of appliances communicating together and having at least one shared one-time encryption key for securing communication between the two has at least one other shared one-time encryption key supplied by the server following the connection of only one of the two appliances to said server.