Security Coordinator Group Key Management for Home Area Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In home area networks, existing authentication systems face challenges in managing group keys effectively, particularly when multiple controllers are present, as they may experience power cutoffs or network disconnections, leading to communication failures and inability to update or share group keys, which hinders secure encrypted communication among devices.

Innovation Solution

An authentication method where one controller, designated as the Security Coordinator (SC), manages the group key, performs mutual authentication with devices and other controllers, and updates the key when necessary, ensuring continuous secure communication by selecting a suitable controller based on attributes such as power availability and network connectivity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If all controllers in the group manage group keys independently, then each controller can maintain secure communication autonomously, but the system complexity increases and communication failures occur when controllers experience power cutoffs or network disconnections

Engineering Contradiction:
Improvecommunication reliabilityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent designates one controller as a key management coordinator that acts as an intermediary for group key management. This coordinator centrally manages group key generation, distribution, and updates, eliminating the need for each controller to independently manage keys. This reduces key management complexity while improving reliability by ensuring consistent key management across the group, preventing communication failures due to power cutoffs or network disconnections of individual controllers.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If manual intervention is required for group key updates, then security can be tightly controlled, but the processing load increases and new devices cannot join automatically

Engineering Contradiction:
Improvedevice joining speedVSAvoidsecurity control
Core Design Contradiction:
ProductivityVSLoss of information

Solution Approach 1:

The patent implements automatic group key update mechanisms where the key management coordinator autonomously generates new group keys and distributes them to all controllers and devices in the group without requiring manual intervention. This enables new devices to join the network automatically and receive group keys seamlessly, improving device joining speed while maintaining security through automated key rotation and distribution protocols.

Inventive Principle:
Principle #25Self-service

3Reliability

If group keys are updated frequently, then security is enhanced, but the network traffic increases and communication efficiency decreases

Engineering Contradiction:
Improvesecurity strengthVSAvoidnetwork energy consumption
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent implements periodic group key updates where the key management coordinator generates new group keys at predetermined time intervals and distributes them to all group members. This periodic update mechanism enhances security by regularly rotating keys while controlling network traffic and energy consumption by updating keys only when necessary, rather than continuously or too frequently. The system balances security requirements with network efficiency through this time-based update strategy.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS11647021B2Authentication method, authentication system, and controller
Publication Date: 2023.05.09 PANASONIC INTELLECTUAL PROPERTY CORP OF AMERICA
  • US11647021B2 patent drawing
  • US11647021B2 patent drawing
  • US11647021B2 patent drawing

AI summary

In an authentication method, a first controller generates a first group key, executes first mutual authentication with devices within a group, and shares the first group key with devices that have succeeded in the first mutual authentication. When a second controller joins the group, the first controller decides which coordinator manages a group key used in common. The first controller executes second mutual authentication with the coordinator, and shares the first group key with the coordinator when the second mutual authentication is successful. The coordinator performs encrypted communication within the group using the first group key, generates a second group key when the first group key valid time runs out and before updating the first group key, executes third mutual authentication with the devices and a third controller, and updates the first group key of the devices and the third controller that have succeeded in the third authentication.