Ordinal Cryptography Key Lifespan Extension
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cryptographic keys used in communication systems face challenges in maintaining security over time, as their identity becomes progressively vulnerable to extraction as they are used, leading to potential breaches in security, especially when replacement is difficult or impractical.
Innovation Solution
The implementation of ordinal cryptography, which relies solely on the ordinal properties of keys, allowing for the derivation of infinite number of equivalent keys that share the same cryptographic properties, effectively extending the lifespan of a shared key by continuously switching to new keys based on ordinal properties, thereby maintaining security indefinitely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Duration of action of stationary object
If a cryptographic key is used repeatedly for communication, then communication continuity is maintained, but the key's security vulnerability increases over time
Solution Approach 1:
The patent segments the cryptographic key usage into multiple derived keys (K1, K2, K3, ...) all originating from a single master key K0. Each derived key is used for a limited period or number of operations, then discarded. This segmentation allows the system to maintain communication continuity using different key segments while the master key remains secure indefinitely, as cryptanalytic gains from one derived key do not compromise other derived keys or the master key itself.
Solution Approach 2:
The patent implements dynamic key derivation where the system transitions from static key usage to dynamic key generation. The master key K0 dynamically generates multiple derived keys through a derivation algorithm, and the system adapts by switching between these derived keys over time. This dynamic approach extends the effective lifespan of the master key while maintaining security, as each derived key's compromise does not affect the master key or other derived keys.
2Reliability
If key replacement is implemented frequently to maintain security, then key security is improved, but system complexity and operational difficulty increase
Solution Approach 1:
The patent applies preliminary action by pre-establishing a master key K0 that can derive multiple future keys through a predetermined algorithm. Instead of managing multiple independent keys from the outset, the system prepares a single master key that can dynamically generate derived keys as needed. This preliminary setup simplifies key management while maintaining security, as the derivation algorithm automatically handles key generation without requiring complex manual key distribution or storage infrastructure.
3Ease of operation
If traditional cryptographic keys are used, then encryption/decryption functionality is provided, but the keys become vulnerable to cryptanalysis over time
Solution Approach 1:
The patent introduces the master key K0 as an intermediary between the need for cryptographic functionality and the requirement for long-term security. The master key does not directly perform encryption/decryption; instead, it generates derived keys that perform these operations. This intermediary role protects the master key from direct cryptanalytic attacks while still providing the necessary cryptographic functionality through its derived keys, which can be safely used and discarded without compromising the master key.
Data Source
AI summary
Extending the “SpaceFlip” cipher defined in the continued application (Ser. No. 16/855,517) to increase the lifespan of the shared secret key, and avoid the need for key replacement; applicable to Internet of Things devices where re-access is prohibitive, adding convenience to normal secure communication; extending the use of the SpaceFlip quantum safe cryptography. Applying key equivocation cryptography where several keys are interchangeable.