Secure Key Migration Between Network Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key migration techniques for network communication devices often require both devices to be configured with the same key derivation function, which may not be feasible, and can lead to unauthorized access if one device becomes compromised, compromising the security and efficiency of authentication and data access.
Innovation Solution
A method and circuit for migrating keys between network communication devices using a computing server, where authentication data is provided to verify authorized key migration, and a temporary key is generated to establish a secure communication channel, allowing for user-controlled migration without revealing the source key, and preventing key migration if the source device is compromised.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If existing key migration techniques are used that reuse a secret key for authentication, then key migration between devices is enabled, but security is compromised if either device becomes compromised allowing the other device to be spoofed
Solution Approach 1:
A computing server acts as an intermediary in the key migration process. The server receives key migration requests, verifies authorization using the source device's unique key derivation data, and issues a temporary key to the target device without exposing the source device's secret key. This mediator approach enables secure key migration while preventing compromise propagation between devices.
Solution Approach 2:
The authentication system is segmented into multiple independent components: each device has its own unique key derivation data, the computing server holds verification capabilities, and temporary keys are issued separately for each migration event. This segmentation ensures that compromise of one device does not affect other devices or the overall system security.
2Stability of the object's composition
If key migration requires both devices to be configured with the same key derivation function, then authentication consistency is maintained, but adaptability is reduced when devices use unique identifiers as input
Solution Approach 1:
The system changes the parameter of key derivation by allowing each device to use its own unique identifier as input to the key derivation function, rather than requiring a common secret key. The computing server adapts by receiving these unique identifiers and performing the key derivation itself, maintaining authentication consistency while enabling broad device compatibility.
3Reliability
If secret keys are stored in secure storage elements to prevent unauthorized access, then security is improved, but key migration becomes more complex requiring trusted environments
Solution Approach 1:
The secret key derivation data is extracted from the source device and used by the computing server to generate a temporary key for the target device. The source device's secret key never leaves the secure storage element, yet migration is enabled by extracting only the necessary derivation data and performing key generation on the server side, reducing migration complexity while maintaining security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Aspects of various embodiments are directed to applications utilizing secret keys for authentication and/or encrypted communication. In certain embodiments, authentication data is provided from a source network communication device to a target network communication device that allows a computing server to verify that the key migration has been is authorized by the source network communication device. The authentication data also enables the data provider and the target network communication device to independently determine a temporary key for establishing a secure communication channel between the service provider and the target network communication device and/or determine a new key for the target network communication device. In some implementations, the authentication data may be exchanged between the source and target network communication devices between offline without involvement of the computing server. When the target network communication device later connects to the computing server, the authentication data may be used to verify that the key migration is authorized and/or generate key(s).