Secure Key Exchange Using Pair-Wise Encrypted Group Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for secure key exchange in communication networks are insecure, as pair-wise keys can be derived by other nodes in the group, compromising the confidentiality of communications.
Innovation Solution
A system and method that utilize a master node to authenticate slave nodes with pair-wise authentication keys, generate a group authentication key, and encrypt it with pair-wise keys for each master-slave node pair, ensuring that only authorized nodes can decrypt and use the group key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a group key is distributed to all nodes for secure communication, then communication efficiency is improved, but security is worsened because pair-wise keys can be derived by other nodes in the group
Solution Approach 1:
The patent segments the group key distribution by encrypting the group key separately for each node using its unique pair-wise key. Instead of distributing a single unprotected group key, the system creates multiple encrypted versions (one per node), ensuring that only the intended recipient can decrypt and access the group key, thus preventing other nodes from deriving pair-wise keys.
Solution Approach 2:
The patent applies local quality by providing each node with a customized encrypted group key tailored to its specific pair-wise key. Each node receives an encrypted version of the group key that is locally decryptable only by that specific node, creating unique security properties for each node while maintaining overall group communication efficiency.
2Reliability
If pair-wise keys are generated for each node pair, then security is improved, but device complexity increases due to multiple key management requirements
Solution Approach 1:
The patent merges the functionality of pair-wise key management with group key distribution. By using the existing pair-wise keys (already established for other purposes) to encrypt the group key, the system combines two key management functions into one process, reducing overall complexity while maintaining security.
Solution Approach 2:
The patent makes the pair-wise keys multi-functional by using them not only for point-to-point authentication but also for encrypting and distributing the group key. This universal use of pair-wise keys reduces the need for separate key management mechanisms, thereby reducing device complexity.
Data Source
AI summary
A system is provided for performing secure key exchange between a plurality of nodes of a communication network. The system comprises a master node and at least two slave nodes. In this context, the master node is configured to authenticate the at least two slave nodes with a pair-wise authentication key corresponding to each pair of master node and slave nodes. The master node is further configured to generate a group authentication key common to the plurality of nodes. Furthermore, the master node is configured to encrypt the group authentication key with the pair-wise authentication key for each respective pair of master node and slave nodes, thereby generating a respective encrypted group authentication key. Moreover, the master node is configured to communicate the encrypted group authentication key to the respective slave nodes.