Primary Unit Secret Sharing via Entropy Reconciliation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information exchange methods between primary and secondary units are vulnerable to attackers, as they do not adequately safeguard against information acquisition during cryptographically insecure communication.
Innovation Solution
The method involves reconciling primary and secondary measured values from a shared entropy source, such as a radio channel, and applying a secret-sharing method like Shamir-Blakley to ensure that only authorized units can reconstruct a shared secret, making it difficult for attackers to acquire usable information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional information exchange methods are used between primary and secondary units, then communication can take place, but the exchange is vulnerable to attackers who can acquire usable information during the communication process
Solution Approach 1:
The secret data is divided into multiple shares using secret-sharing methods (e.g., Shamir's Secret Sharing). Each share alone is insufficient to reconstruct the secret, but combining sufficient shares reveals the secret. This segmentation ensures that even if an attacker intercepts some communication, they cannot reconstruct the secret without obtaining all necessary shares from authorized units.
Solution Approach 2:
Before the actual secret communication takes place, the system performs preliminary key negotiation and establishes shared secrets through secure key agreement protocols. This preliminary action creates cryptographic foundations that protect the subsequent information exchange, allowing units to authenticate each other and establish encrypted communication channels before sensitive data is transmitted.
2Reliability
If measured values from a shared entropy source are used for key generation, then security is improved, but measurement precision and reconciliation between primary and secondary units become challenging
Solution Approach 1:
The system implements feedback mechanisms where the primary unit sends reconciliation data to the secondary unit, allowing the secondary unit to adjust its measured values to match the primary unit's values. This feedback loop enables precise alignment of measured values from independent entropy sources while maintaining the security benefits of using physical measurements for key generation.
Solution Approach 2:
The system transforms raw measured values (such as radio channel characteristics like RSSI or CSI) into standardized cryptographic parameters through processing functions. By changing the parameter representation and applying error correction, the system reconciles measurement variations while preserving the entropy and security properties of the original physical measurements.
Data Source
AI summary
A method for operating a primary unit that exchanges information with at least one secondary unit, including the following: ascertainment by the primary unit of a first number of primary measured values, in particular measured values of an entropy source shared with the secondary unit; reconciliation by the primary unit of the first number of primary measured values, in particular with a corresponding number of secondary measured values that have been obtained by the secondary unit, to obtain reconciled primary measured values, the secondary measured values having been obtained by the secondary unit in particular from the shared entropy source; and application by the primary unit of a secret-sharing method to share secret data with the secondary unit, the secret-sharing method being executed as a function of the reconciled primary measured values.