Secure Secondary Platform Bundle Configuration via Primary Platform
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technologies lack a secure method for configuring unconfigured secondary platform bundles on primary platforms, especially in resource-constrained environments with insecure components, to support various cryptographic algorithms and ensure secure communication with networks.
Innovation Solution
A system where a configuration server securely configures a secondary platform bundle by generating cryptographic keys, certificates, and parameters, using a secure session with the primary platform to convert an unconfigured bundle into a configured state, enabling secure communication and authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secondary platform bundle is configured with device-specific cryptographic parameters, then secure communication is enabled, but the configuration process becomes complex and resource-intensive
Solution Approach 1:
The patent applies preliminary action by pre-configuring secondary platform bundles with generic cryptographic parameters before distribution. The bundles are prepared in advance with placeholder certificates and keys that can be easily replaced during a simplified activation process, avoiding the need for complex device-specific configuration at deployment time.
Solution Approach 2:
The patent uses an intermediary approach by introducing a configuration server that acts as a mediator between the primary platform and secondary platform bundles. This server automatically generates device-specific cryptographic parameters and configures the bundles, eliminating the need for manual complex configuration by end users.
2Reliability
If cryptographic operations are performed in an isolated secure environment, then security is improved, but resource availability is reduced
Solution Approach 1:
The patent applies segmentation by dividing cryptographic operations into two parts: secure but resource-intensive operations (key generation, signing) are performed in the isolated secure environment, while less resource-intensive operations (verification, encryption/decryption) can be performed in the less secure but more resource-available primary platform environment.
Solution Approach 2:
The patent uses copying by creating virtual machine instances that replicate the secure processing environment. Multiple copies of the secure environment can be created, allowing parallel cryptographic operations without requiring all resources to be available simultaneously in a single isolated environment.
3Adaptability or versatility
If a primary platform hosts multiple secondary platform bundles, then versatility is improved, but security risks increase
Solution Approach 1:
The patent applies segmentation by isolating each secondary platform bundle in its own virtual machine instance with dedicated cryptographic parameters and secure memory spaces. This prevents one compromised bundle from affecting other bundles or the primary platform, as each operates in a segmented, sandboxed environment.
Solution Approach 2:
The patent uses disposable cryptographic parameters for each secondary platform bundle, where each bundle receives unique certificates and keys that are generated specifically for that bundle and can be independently revoked or replaced without affecting other bundles, limiting the impact of security breaches.
Data Source
AI summary
A primary platform (PP) can (i) support a first set of cryptographic parameters and (ii) securely download an unconfigured secondary platform bundle (SPB) that includes a configuration package (SPB CP). The SPB CP can establish a secure session with a configuration server (CS). The CS can select operating cryptographic parameters supported by the first set. The SPB CP can derive an SPB private and public key. The PP can use the selected operating cryptographic parameters to securely authenticate and sign the SPB public key. The CS can (i) verify the PP signature for the SPB public key and (ii) generate an SPB identity and certificate for the SPB and (iii) send the certificate and SPB configuration data to the SPB CP. The SPB CP can complete configuration of the SPB using the SPB identity, certificate, and configuration data. The configured SPB can authenticate with a network using the certificate.