Secure Symmetrical Key Management via Seed Combination
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional key distribution methods in wireless networks are vulnerable to compromise, as either the old key or the key distribution key must be secure, and changing these keys securely is challenging, especially in resource-constrained nodes.
Innovation Solution
Each node in the network is provided with a seed value and a unique seed identifier, allowing it to generate a cryptographic key for encryption and decryption without transmitting the key over the network, and a key recovery mechanism ensures secure updates by using the old key to decrypt and update the seed value and identifier.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional symmetric key distribution is used where old key encrypts new key, then key distribution is simplified, but security is compromised because anyone with the old key can retrieve all subsequent keys
Solution Approach 1:
The system pre-distributes master keys to head ends during a secure initial provisioning phase before the nodes become operational. This preliminary key distribution allows head ends to decrypt and forward new key material to nodes without requiring complex real-time key exchange protocols, thus simplifying ongoing key distribution while maintaining security through the use of pre-established secure channels.
Solution Approach 2:
Head ends act as intermediaries between the key management system and resource-constrained nodes. The head ends receive encrypted new key material from the key management system using pre-distributed master keys, decrypt it, and then forward it to the appropriate nodes. This intermediary approach simplifies node operations while maintaining security through layered key management.
2Device complexity
If a key distribution key is used to encrypt new keys, then key management is centralized, but security is compromised because compromise of the key distribution key exposes all subsequent key changes
Solution Approach 1:
The system segments the key distribution function across multiple head ends, each holding a unique pre-distributed master key. Instead of relying on a single key distribution key, the system divides the key management responsibility among multiple entities, so that compromise of one master key does not expose all key material. Each head end can independently distribute keys to its associated nodes without requiring a central key distribution key.
3Use of energy by moving object
If symmetric key algorithms are used in resource-constrained nodes, then computational efficiency is improved, but key distribution becomes more difficult
Solution Approach 1:
Nodes automatically receive and process new key material through the head end infrastructure without requiring manual key distribution or complex key exchange protocols. The head ends handle the computationally intensive key generation and encryption operations, while nodes simply receive and store the pre-computed key material, making the system self-service oriented and reducing operational complexity.
4Productivity
If cryptographic keys are transmitted over the network, then key updates can be performed, but security is compromised due to potential interception
Solution Approach 1:
The system performs preliminary key distribution to head ends through secure out-of-band channels before the nodes become operational. These pre-distributed master keys are stored securely and used to encrypt and forward new key material to nodes through the network. This preliminary provisioning eliminates the need to transmit sensitive key material over the network during normal operation, as all subsequent key distribution is encrypted using the pre-established master keys.
Data Source
AI summary
Nodes of a network are each provided with a seed value and a seed identifier. Each seed value has a corresponding unique seed identifier which is maintained within the system. Within each authorized node, the seed value is combined with a local node identifier, such as a serial number or other unique identifier, to form a cryptographic key that is then used by the node to encrypt and/or decrypt data transmitted and received by that node. The cryptographic key is never transmitted over the network, and each node is able to create a different cryptographic key for use in communicating with other nodes.