Opposite Direction Indices for Secure Key Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cryptographic bidirectional communication systems face challenges in securely managing and synchronizing encryption keys across multiple devices, particularly in ensuring that the same elements of a shared master key are not reused, which can compromise security and efficiency.

Innovation Solution

The system employs two indices moving in opposite directions within a shared master key, where each device selects encryption keys from opposite ends, ensuring that no portion of the key is used more than once, and the encryption server manages these indices to prevent reuse and maintain security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional key management methods are used in bidirectional communication, then devices can exchange encrypted messages, but key reuse occurs compromising security

Engineering Contradiction:
Improvecryptographic securityVSAvoidkey synchronization complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Instead of having both devices increment their key indices in the same direction (conventional approach), the patent applies inversion by having one device increment its index forward while the other device increments its index backward. This opposite-direction increment strategy ensures that both devices access different key elements from the shared master key, completely preventing key reuse and enhancing cryptographic security without requiring complex synchronization protocols.

Inventive Principle:
Principle #13The other way round (Inversion)

2Reliability

If key synchronization protocols are implemented to prevent key reuse, then security is improved, but communication overhead increases

Engineering Contradiction:
Improvekey uniquenessVSAvoidsynchronization time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system applies self-service by enabling each device to autonomously determine which key element to use based on its own counter value and the known opposite-direction increment pattern. Each device independently calculates its key index without needing to query or synchronize with the other device, eliminating synchronization time and communication overhead while ensuring key uniqueness through the mathematical guarantee of opposite-direction progression.

Inventive Principle:
Principle #25Self-service

3Ease of operation

If a shared master key is used by multiple devices, then key distribution is simplified, but key reuse across devices occurs

Engineering Contradiction:
Improvekey distributionVSAvoidkey reuse prevention
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent applies dynamics by introducing time-varying counters that change with each encryption operation. Each device maintains a local counter that increments (or decrements) with every message encrypted, dynamically selecting different key elements from the shared master key based on the current counter value. This dynamic key selection ensures that even though multiple devices share the same master key, they never reuse the same key elements because their counters evolve in opposite directions.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP2400688B1Indices moving in opposite directions for cryptographic bidirectional communications using a shared master key
Publication Date: 2020.11.11 BLACKBERRY LTD
  • EP2400688B1 patent drawingFigure 1
  • EP2400688B1 patent drawingFigure 2
  • EP2400688B1 patent drawingFigure 3

AI summary

A master key may be used by each participant in a secure communication. Indeed, each participant may select and encryption key from a distinct end of the master key. To eliminate a necessity for the end points in the secure communication to maintain a master key corresponding to every possible correspondent, the participants may communicate through an encryption server.