Public Key Exchange via Segmented Messages
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing public key cryptography techniques in wireless networks are vulnerable to man-in-the-middle attacks, where an attacker can impersonate a communication partner to intercept and alter data transmissions.
Innovation Solution
A method and system that uses a public key distribution protocol to securely exchange public keys among devices in multiple messages, increasing security by dividing the public key across messages, thereby preventing active attacks, and subsequently establishing a shared master key for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key cryptography is used to establish a shared master key between two devices, then security against passive attacks is improved, but vulnerability to active attacks (man-in-the-middle attacks) increases
Solution Approach 1:
The patent divides the public key exchange process into multiple discrete messages transmitted in sequence. Each message contains a portion of the key exchange information, and the receiving device must verify each message against expected values before proceeding to the next message. This segmentation prevents an attacker from successfully intercepting and altering the entire key exchange process, as they would need to predict and replicate multiple sequential messages with correct verification values.
2Productivity
If a single message is used for public key exchange, then the key exchange process is simple and fast, but security against active attacks is weakened
Solution Approach 1:
The patent implements a periodic multi-message exchange protocol where public key exchange information is transmitted in discrete, sequential messages rather than a single continuous transmission. Each message is separated by verification steps where the receiving device checks the authenticity of the received message before proceeding to the next message exchange. This periodic structure with built-in verification points prevents attackers from successfully injecting fraudulent messages during the key exchange process.
3Loss of time
If public key is transmitted in full in a single message, then the key exchange is efficient, but the risk of key compromise increases
Solution Approach 1:
The patent segments the public key exchange information across multiple messages rather than transmitting the complete key information in a single message. Each message contains a portion of the key exchange data that must be verified against expected values before the receiving device proceeds to request the next message. This segmentation reduces the risk of key compromise because an attacker would need to successfully intercept and replicate multiple sequential messages with correct verification values, rather than compromising a single message containing all key information.
Data Source
AI summary
The present application describes a method and system for discovering and authenticating communication devices within a wireless network. According to an embodiment, communication devices exchange public keys using multiple messages each including at least a portion of the public key of the sending device. The devices authenticate the receipt of the public key and establish a shared master key. The shared master key is used to further derive a session key for securing the application data between the communicating devices for a current session.