Security Device Communication Protocol Using Encrypted Session Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security systems face challenges in securely managing communications between security devices and servers, particularly in resource-intensive registration processes and network discovery protocols, which can be inefficient and insecure.
Innovation Solution
A method and system for securing communications between security devices and servers using encrypted session keys, including an initial registration key, rotation key, and session keys, without relying on Secure Socket Layer (SSL) connections, and establishing communication between devices on a local network without using network discovery protocols like Bonjour or uPnP.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SSL connections are used to secure communications between security devices and servers, then security is improved, but device complexity and resource consumption increase
Solution Approach 1:
The security protocol is segmented into distinct phases: initial registration with device identifier exchange, session key request phase, and data transmission phase. Each phase uses appropriate encryption (AES-128 or AES-256) rather than requiring full SSL/TLS stack, reducing complexity while maintaining security
Solution Approach 2:
The system dynamically changes encryption parameters by using different key types (device identifier, session key, rotation key) and key lengths (AES-128 or AES-256) based on security requirements and device capabilities, optimizing the balance between security and resource consumption
2Ease of operation
If traditional network discovery protocols like Bonjour or uPnP are used to establish communication between devices, then ease of operation is improved, but security is worsened due to exposure of device information
Solution Approach 1:
A server acts as an intermediary in the registration process. Devices register with the server which stores their identifiers and facilitates communication without requiring devices to directly discover or expose information about each other, eliminating the need for traditional network discovery protocols
Solution Approach 2:
Devices perform preliminary registration with the server before actual communication begins. The server pre-establishes security credentials and device identifiers, so that when devices need to communicate, they can do so securely without needing to perform discovery operations that would expose information
Data Source
AI summary
A method of securing communications between a security device and a security server include receiving, at the security server, a registration request from the security device, the registration request being encrypted using an initial registration key. A device identifier and rotation key unique to the security device are transmitted to the security device. A first session key request is received at the security server from the security device, the request being encrypted using the rotation key. A first session key is transmitted to the security device in response. One or more communications, encrypted using the first session key, is received at the security server from the security device. A second session key request is received at the security server from the security device after the first session key has expired, the request encrypted using the rotation key. A second session key is transmitted to the security device in response.