Sensor-Based Secure Random Number Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for generating random numbers, particularly for security applications, lack robustness and are vulnerable to exposure, making them insecure against advanced computational attacks, especially in fields requiring high randomness like cryptography.
Innovation Solution
A system and method for generating secure information using sensor data from multiple devices, where sensor information is collected and synchronized independently to produce secure data that can be used for encryption, authentication, and other security applications without exposing the key to third parties, utilizing a sensor module, transceiver module, and memory module for data collection, storage, and synchronization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional random number generation methods (RNG, software algorithms) are used, then the process is simple and practical, but the security and robustness are insufficient against computational attacks
Solution Approach 1:
The patent segments the random number generation process into multiple independent components: multiple sensors (accelerometer, gyroscope, magnetometer, etc.), multiple data collection devices, and multiple processing stages. Each component contributes a portion of the entropy, and the final random number is derived from the combination of all segments, making the system more secure without requiring each individual component to be highly complex
Solution Approach 2:
The patent introduces an intermediary processing layer that collects data from multiple sensors and devices, then processes this data through a secure random number generation algorithm. This intermediary layer acts as a mediator between the physical sensor data and the final cryptographic random number, enhancing security while maintaining system manageability
2Ease of operation
If encryption keys are exposed to third parties for security applications, then communication and authentication are enabled, but the security is weakened and vulnerable to attacks
Solution Approach 1:
The patent implements a self-service mechanism where each device independently generates its own cryptographic keys and random numbers using its local sensors and processing units. The devices authenticate each other by comparing derived values rather than sharing raw keys. This self-service approach enables authentication functionality while ensuring that no device needs to expose its private keys to third parties
Solution Approach 2:
The patent changes the parameters of key distribution by transitioning from static pre-shared keys to dynamic, device-specific random numbers generated from sensor data. Each device generates unique random parameters based on its local environment and sensor readings, enabling flexible authentication without requiring secure key distribution infrastructure
3Power
If computational power is increased to break codes through brute-force attacks, then code breaking speed increases, but the security system becomes more vulnerable
Solution Approach 1:
The patent combines multiple types of entropy sources from different physical domains (mechanical acceleration, rotational motion, magnetic field variations, electromagnetic signals) into a composite random number generation system. This composite approach creates a security system that is resistant to computational attacks because the entropy comes from diverse physical phenomena that cannot be cracked by increasing computational power alone
Data Source
AI summary
Systems, apparatuses and methods are described for creating security information using sensors. The security information may be collected independently between at least two devices. The security information may be filtered by communicating portions of the security information between the devices until a statistical match exists. The remaining non-communicated security information on the at least two devices may then be used for any security related applications.