Secure Communication Between Network Units Using Dynamic Key Derivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing secure and authentic communication between an insecure hardware platform and a secure module is challenging due to the risk of attack on the communication interface, with existing methods like obfuscation and white-box cryptography being vulnerable to analysis and side-channel attacks.
Innovation Solution
A method involving the storage of common secrets and algorithms on both secure hardware and software components, where these secrets are used to derive new keys for secure communication, with regular updates to prevent prolonged attack analysis, utilizing secure hardware for cryptographic operations and secure software for data protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure hardware modules are used to protect software, then security against external attacks is improved, but communication between the insecure platform and secure module becomes vulnerable to monitoring and analysis
Solution Approach 1:
The patent applies preliminary action by pre-establishing a shared secret between the insecure platform and secure module before any communication occurs. This shared secret is used to derive communication keys that protect subsequent data exchanges, preventing attackers from monitoring or analyzing communications without knowing the pre-established secret.
Solution Approach 2:
The patent implements dynamics by regularly updating communication keys derived from the shared secret. Instead of using static encryption keys, the system dynamically generates new keys at intervals, limiting the window of opportunity for attackers and ensuring that even if one key is compromised, previous and future communications remain secure.
2Reliability
If obfuscation or white-box cryptography is used to protect software mode of operation, then confidentiality is improved, but the technique remains vulnerable to analysis and cracking by attackers
Solution Approach 1:
The patent extracts the critical security function (key storage and cryptographic operations) from the vulnerable software environment into a dedicated secure hardware module. This separates the security-critical operations from the general-purpose insecure platform, ensuring that even if the software is analyzed or cracked, the core secrets remain protected in hardware.
Solution Approach 2:
The patent introduces a shared secret as an intermediary that enables secure communication between the insecure platform and secure module without exposing either party's internal secrets. This intermediary value allows both sides to derive matching encryption keys independently, protecting the communication channel while maintaining the security boundaries of each system.
3Reliability
If secure hardware modules are deployed, then secure storage and cryptographic operations are improved, but device complexity and cost increase
Solution Approach 1:
The patent makes the secure hardware module universal by having it perform multiple security functions: storing the shared secret, generating communication keys, and performing cryptographic operations. This multi-functionality reduces the need for separate dedicated security components for each function, simplifying the overall system architecture while maintaining security.
Data Source
AI summary
The invention relates to a first network unit (See) which comprises a secure hardware component (HK) for saving and running software. A second network unit (P) comprises a secure software component (SK) for saving and running software. A method for secure communication comprises: saving a first common secret, a first algorithm and a second algorithm on the network units; sending a first date from the second network unit to the first network unit; running the first algorithm on the first network unit and on the second network unit wherein the input is in each case formed by the second common secret and the first date; sending of a second date from the first network unit to the second network unit; running the second algorithm on the first network unit and on the second network unit; wherein the input is formed in each case by the second common secret and the second date; and use of the third common secret for a secure communication.