Session Key Generation Using Master Key and Random Signal
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for generating session keys are inefficient due to high computation time, memory requirements, and vulnerability, particularly when using one-way hash functions or exchanging random signals, which lead to performance overhead and security risks.
Innovation Solution
A method and system that generate a cryptographic session key by combining a known master key with an open random number signal, using a Pseudo Random Number Generator (PRNG) and sieve functions to reduce computation time and memory requirements, while ensuring security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If one-way hash functions are used to generate session keys, then security is improved, but computation time increases
Solution Approach 1:
The patent introduces a session key as an intermediary element that bridges the master key and encrypted communications. Instead of directly using complex hash functions on master keys for each communication, a session key is generated and used as a mediator, reducing the computational burden while maintaining security through the layered key structure.
Solution Approach 2:
The patent changes the parameter of key generation from direct complex hash computation to a simplified process using pre-shared master keys combined with session-specific random values. This parameter change reduces computation time while maintaining security through the use of unique session keys derived from the master key.
2Reliability
If random signals are exchanged between communicators to generate keys, then security is improved, but communication overhead increases
Solution Approach 1:
The patent applies preliminary action by pre-establishing master keys between communicators before actual communication sessions begin. This preliminary key establishment eliminates the need for real-time random signal exchange during communication sessions, reducing round trip delays while maintaining security through the pre-shared master key infrastructure.
Solution Approach 2:
Each communicator independently generates session keys using their own master key and local random values, without requiring the other party to contribute random signals. This self-service approach eliminates the need for random signal exchange and associated communication overhead, while still producing secure session-specific keys.
3Reliability
If multiple session keys are stored for secure communication, then security is improved, but memory requirements increase
Solution Approach 1:
The patent extracts the session-specific entropy from the key generation process by using unique random values for each session combined with the master key. This allows session keys to be generated on-demand without storing multiple keys, as each session key is derived independently from the master key and session-specific random input, reducing memory requirements while maintaining security.
4Reliability
If complex key generation methods are used, then security is improved, but device complexity increases
Solution Approach 1:
The patent segments the key management system into two distinct components: master keys for long-term identification and session keys for individual communication sessions. This segmentation simplifies the overall system by separating the complex key generation process into manageable parts, where session keys are derived from master keys using relatively simple combination operations rather than complex cryptographic transformations.
Data Source
AI summary
The present disclosure describes systems and methods of generating a cryptographic session key based on a known master key shared between a sender communicator and a receiver communicator in a communication network. In one example, a method includes receiving a request from the receiver communicator, by the sender communicator, to establish a communication session between the sender and the receiver communicator. The method further includes generating an open random number signal at the sender communicator and combining the generated open random number signal with the known master key to generate the cryptographic session key.