Session Key Generation Using One-Way Functions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for generating session keys in network communication are complex and resource-intensive, particularly for devices without secure elements, and may impact network performance.
Innovation Solution
A method where a destination node generates a session key by executing a one-way function using a part of the last received message and an initial key, allowing for secure encryption and decryption, potentially iteratively updating the session key for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex pseudo-random number generators and secure elements are used for session key generation, then security is improved, but device complexity and resource consumption increase
Solution Approach 1:
The patent extracts the session key generation process from complex secure elements and pseudo-random number generators, implementing it instead through a simplified one-way function that operates on message data. This removes the need for expensive secure hardware while maintaining security through cryptographic one-way functions.
Solution Approach 2:
The patent replaces the mechanical/hardware-based secure elements and complex pseudo-random generation mechanisms with a software-based one-way function implementation. This substitution reduces hardware complexity while achieving equivalent or superior security through cryptographic principles.
2Reliability
If complex session key generation methods are used, then security is improved, but processing time and energy consumption increase
Solution Approach 1:
The patent extracts the time-consuming elements of session key generation (complex pseudo-random number generation) and replaces them with a more efficient one-way function that processes message data directly, significantly reducing processing time while maintaining security.
Solution Approach 2:
The one-way function is designed to utilize message data that is already available in the communication process, eliminating the need for separate random number generation steps. This preliminary utilization of existing data accelerates the session key generation process.
3Reliability
If secure elements are required for session key generation, then security is improved, but device cost and complexity increase
Solution Approach 1:
The patent extracts the session key generation capability from dedicated secure hardware elements and implements it through standard processing units executing one-way functions. This makes devices manufacturable without expensive secure element components while preserving security through cryptographic design.
Solution Approach 2:
The patent replaces expensive, permanent secure hardware elements with software-based cryptographic functions that can be implemented on standard, cheaper processing units. This approach uses readily available components to achieve the same security function.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
According to a first aspect of the present disclosure, a method is conceived for securing data communicated in a network, the method comprising: receiving, by a destination node in the network, at least one message transmitted by a source node in the network; generating, by said destination node, a session key by executing a one-way function that takes at least a part of a last received message and an initial key as input parameters; using, by said destination node, the session key for encrypting or decrypting said data. Furthermore, according to a second aspect of the present disclosure, a corresponding computer program product is conceived. Furthermore, according to a third aspect of the present disclosure, a corresponding system is conceived.