Quantum-Secure Key Depot for Symmetric Key Distribution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional methods for establishing and distributing symmetric keys are burdensome, time-consuming, and prone to security vulnerabilities, leading to increased operational overhead and costs, especially when continuous key lifecycle management is required.

Innovation Solution

A quantum-secure key depot system that uses entangled particles to generate initial symmetric keys and seed data for continuous derivation of new keys, reducing the need for frequent key distribution processes by leveraging lightweight key allocation indications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional key distribution methods are used, then symmetric keys can be established between parties, but the process becomes time-consuming and operationally burdensome

Engineering Contradiction:
Improvesecure key establishmentVSAvoidkey distribution time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary key derivation by generating a master symmetric key in advance using quantum key distribution between the key depot and host device. This master key is then used to derive multiple session keys locally without requiring repeated physical key distribution, eliminating the need for time-consuming manual key handling procedures for each new key.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The invention replaces the mechanical manual key distribution process (physically transporting key components in safes, dual-control entry, manual logging) with an automated electronic system that uses quantum-secured key distribution combined with algorithmic key derivation. The key management team's manual operations are substituted by automated key derivation circuitry that generates keys electronically based on pre-shared quantum-secured material.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If manual key distribution processes are implemented, then key security can be maintained through physical controls, but operational overhead and costs increase significantly

Engineering Contradiction:
Improvekey securityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system enables self-service key management where the key derivation circuitry automatically generates new symmetric keys locally at the host device and key depot using pre-shared quantum-secured material. The system autonomously performs key derivation, key allocation indication generation, and key distribution without requiring human operators to physically handle key components, thereby reducing operational overhead while maintaining security through automated processes.

Inventive Principle:
Principle #25Self-service

3Reliability

If frequent symmetric key rotation is performed, then security vulnerabilities are reduced, but operational burden and costs increase

Engineering Contradiction:
Improvesecurity vulnerability reductionVSAvoidoperational efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system establishes continuous secure communication channels by deriving multiple session keys from a single quantum-secured master key. Instead of performing discrete, repeated key distribution operations, the system continuously generates new symmetric keys locally using the master key and key derivation algorithms, allowing frequent key rotation without the operational burden of repeated manual key distribution processes.

Inventive Principle:
Principle #20Continuity of useful action

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach decreases operational overhead, costs, and security risks while maintaining secure communication, even in low-bandwidth environments, by streamlining key generation and distribution, and enhancing security through quantum-based methods.

Implementation Method 1

receiving, by communications hardware of a key depot device, an entangled particles set, wherein a corresponding entangled particles set is received by a host device. The apparatus also includes a secure key generator configured to generate an initial symmetric key based on the entangled particles set

Methodology Applied
Scientific EffectQuantum entanglement:

Implementation Method 2

key derivation circuitry of the key depot device configured to generate a first symmetric key based at least on a portion of the seed data

Methodology Applied
Scientific EffectCryptographic key derivation:

Data Source

PatentUS12143480B1Systems and methods for distributing symmetric keys via a quantum-secure key depot
Publication Date: 2024.11.12 WELLS FARGO BANK NA
  • US12143480B1 patent drawing
  • US12143480B1 patent drawing
  • US12143480B1 patent drawing

AI summary

Systems, apparatuses, methods, and computer program products are disclosed for secure communication based on random key derivation. An example method includes receiving an initial symmetric key shared between the key depot device and a host device. The method also includes receiving seed data shared between the key depot device and the host device. The method also includes establishing a connection to a client device. The method also includes generating, by key derivation circuitry of the key depot device, a first symmetric key based at least on a portion of the seed data. The method also includes causing transmission of the first symmetric key to the client device. The method also includes generating a key allocation indication that identifies an authentication target and comprises an indication of the generation of the first symmetric key. The method also includes causing transmission of the key allocation indication to the host device.