Random Number Generator Entropy Mixing for Security Reliability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional electronic devices rely on single deterministic random number generator modules for security, which can lead to security degradation due to hardware malfunctions and complex randomness measurement procedures, making it difficult to maintain randomness effectively.
Innovation Solution
Implementing multiple non-deterministic random number generator modules to enhance the randomness and security of electronic devices by acquiring and mixing random number sequences, thereby generating more secure encryption keys without modifying the kernel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single deterministic random number generator module is used for security key generation, then device complexity is reduced, but reliability deteriorates due to vulnerability to hardware malfunctions and security degradation
Solution Approach 1:
The patent divides the random number generation system into multiple independent modules: a first non-deterministic random number generator module, a second non-deterministic random number generator module, and a deterministic random number generator module. Each module operates independently to generate random number sequences that are then combined, thereby segmenting the security function across multiple components to reduce vulnerability to single-point hardware failures.
Solution Approach 2:
The patent merges multiple random number sequences from different sources (first NDRNG, second NDRNG, and DRNG) into a single combined random number sequence. This combining approach ensures that even if one module fails, the security system can still function using sequences from other modules, thus improving reliability without requiring a complete system redesign.
2Measurement precision
If conventional randomness measurement procedures are followed according to NIST standards, then measurement precision is improved, but device complexity and operational difficulty increase significantly
Solution Approach 1:
The deterministic random number generator module automatically performs the randomness measurement and evaluation functions that would otherwise require complex external testing equipment and procedures. The module self-regulates by generating sequences, evaluating their randomness properties, and adjusting its operation accordingly, thereby eliminating the need for separate complex measurement systems while maintaining NIST-compliant precision.
3Reliability
If a single non-deterministic random number generator module is used to provide seed information, then device complexity is reduced, but reliability deteriorates due to security degradation from unexpected hardware errors
Solution Approach 1:
The patent applies different quality characteristics to different parts of the random number generation system. The first and second non-deterministic modules provide high-entropy seed information with different local characteristics, while the deterministic module provides structured sequence generation. This local quality differentiation ensures that even if one module produces degraded output, the other modules compensate to maintain overall security reliability.
Data Source
AI summary
An electronic device according to an embodiment includes a first random number generator module, a second random number generator module, a buffer memory configured to store random number data, and a processor configured to be operatively connected to the first random number generator module, the second random number generator module, and the buffer memory, wherein the processor is configured to acquire a first random number sequence from the first random number generator module to store the acquired first random number sequence in the buffer memory, generate a third random number sequence obtained by changing the first random number sequence based on a second random number sequence acquired from the second random number generator module, and generate an encryption key based on the third random number sequence. In addition, various other embodiments are possible.