Session Key Derivation for Resource-Constrained Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication protocols like TLS require both entities to have cryptographically secure random number generators and public/private key encryption, which is computationally heavy and not suitable for resource-constrained environments such as chiplets in a System-in-a-Package (SiP), necessitating a lighter weight protocol for secure session key derivation.
Innovation Solution
A method where a first entity generates a secure session key based on a shared random number and pre-shared secret, with the second entity being resource-constrained and unable to generate random numbers, using a Root-of-Trust (RoT) chiplet to authenticate and derive the session key with minimal cryptographic operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TLS protocol is used for secure communication, then security and integrity protection are improved, but computational overhead and resource requirements increase
Solution Approach 1:
The patent segments the cryptographic functionality by introducing a Root-of-Trust (RoT) entity that handles complex cryptographic operations separately from resource-constrained entities. This division allows secure communication without requiring full TLS implementation in resource-constrained devices, reducing their computational overhead while maintaining security through the RoT's cryptographic capabilities.
Solution Approach 2:
The RoT entity acts as an intermediary that provides cryptographic services to resource-constrained entities. Instead of requiring each entity to perform complex cryptographic operations independently, the RoT mediates the key derivation and authentication processes, enabling secure communication with reduced computational requirements for the constrained entities.
2Reliability
If both entities perform cryptographic operations for mutual authentication, then security is improved, but resource consumption increases
Solution Approach 1:
The patent implements asymmetric authentication where the RoT entity performs complex cryptographic operations while resource-constrained entities perform minimal operations. This asymmetric division of cryptographic workload maintains authentication security without requiring both entities to have equal computational capabilities, significantly reducing resource consumption for constrained entities.
3Reliability
If resource-constrained entities implement full random number generation capability, then cryptographic security is improved, but device complexity and resource usage increase
Solution Approach 1:
The patent extracts the random number generation functionality from resource-constrained entities and concentrates it in the RoT entity. This extraction allows constrained entities to participate in secure key derivation without implementing their own random number generators, reducing device complexity while maintaining cryptographic security through the RoT's random number generation capabilities.
Data Source
AI summary
A first entity generates a secure session key and an initialization vector for integrity protecting messages transmitted between the first entity and a second entity, wherein the secure session key is generated based on a first random number and a pre-shared secret, wherein the first random number is shared via a transmission by the first entity of a first random number message to the second entity, and wherein the first entity receives the pre-shared secret of the second entity during provisioning. The first entity transmits a second random number to the second entity to initiate a process for authenticating the second entity, wherein the second entity is resource constrained relative to the first entity and is not configurable to generate the second random number.