Networked Responder Proxy for Secure Device Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Device Provisioning Protocol (DPP) versions, such as DPPv1.0, face challenges in securely reusing bootstrapping public keys, ensuring the security of responder bootstrap private keys, and efficiently configuring devices for multiple networks, particularly in scenarios where devices need frequent reconfiguration or when insecure responders are involved.
Innovation Solution
Implementing a networked responder proxy that conducts a DPP with an initiator, utilizing cryptographic algorithms like elliptic curve Diffie-Hellman key exchange and secure hash functions to securely transfer and manage PKI keys, allowing for mutual authentication and secure credential transfer without exposing the responder bootstrap private key, and enabling devices to connect to various networks using pre-configured credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If DPPv1.0 is used for device provisioning, then device configuration can be automated, but security vulnerabilities arise when public keys are reused and responder private keys need to be securely stored
Solution Approach 1:
The patent introduces a server as an intermediary between the initiator and responder. The server stores the responder bootstrap private key and manages public key distribution, eliminating the need for the responder to store the private key locally. This mediator architecture maintains automation while improving security by centralizing sensitive key management.
Solution Approach 2:
The patent segments the key management functions by separating the responder bootstrap private key storage from the responder device itself. The private key is stored on a remote server while the responder only holds the public key, dividing the security responsibilities and reducing the attack surface on the responder device.
2Reliability
If manual configuration is performed to ensure security, then key management can be controlled, but time consumption increases and error-prone operations occur
Solution Approach 1:
The patent implements preliminary action by pre-provisioning devices with initiator bootstrap public keys during manufacturing. This allows devices to be pre-configured with necessary cryptographic materials before deployment, enabling automated connection to responders without manual intervention while maintaining security through pre-established trust relationships.
Solution Approach 2:
The patent enables self-service through automated key exchange and provisioning processes. Initiators can autonomously discover responders, exchange cryptographic keys, and complete provisioning without human intervention. The system automatically manages the complex key distribution and storage operations that would otherwise require manual configuration.
3Ease of operation
If responder private keys are stored locally for authentication, then authentication can be performed, but security risks increase when devices are compromised or lost
Solution Approach 1:
The server acts as a mediator that holds the responder bootstrap private key in a secure environment. The responder device only stores the public key and uses it for authentication without ever having access to the private key. This eliminates the security risk of private key exposure on potentially compromised responder devices while maintaining authentication capability through the server intermediary.
Solution Approach 2:
The patent extracts the sensitive responder bootstrap private key from the responder device and relocates it to a secure server environment. This extraction removes the security vulnerability of storing private keys on edge devices that may be physically accessed or compromised, while the responder maintains its authentication function using only the public key.
Data Source
AI summary
A network can operate a WiFi access point with credentials. An unconfigured device can support a Device Provisioning Protocol (DPP), and record bootstrap public keys and initiator private keys. The network can record bootstrap public and responder private keys and operate a DPP server. A responder proxy can establish a secure and mutually authenticated connection with the network. The network can (i) derive responder ephemeral public and private keys, (ii) record the initiator bootstrap public key, and (iii) select a responder mode for the responder. The network can derive an encryption key with at least the (i) recorded the initiator bootstrap public key and (ii) derived responder ephemeral private key. The network can encrypt credentials using at least the derived encryption key and send the encrypted credentials through the responder proxy to the initiator, which can forward the encrypted credentials to the device, thereby supporting a device configuration.