Session Key Generation with Multiple Security Associations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional session key generation protocols in communication systems, such as the GKE protocol, face inefficiencies and security concerns during handoffs between network elements, leading to increased computational burdens, delays, and potential security compromises when generating secondary keys from primary keys.
Innovation Solution
Modifying the session key generation protocol to introduce a multiplier, generating multiple security associations of equal length and security from a single instance, eliminating the need for additional randomness and reducing computational overhead while maintaining security during handoffs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single instance of the GKE protocol is used to generate session keys, then the authentication process is simplified, but multiple handoffs require repeating the protocol which increases computational burden and delay
Solution Approach 1:
The patent applies preliminary action by generating multiple security associations in advance during the initial authentication phase. Instead of generating one session key at a time during handoffs, the system pre-generates multiple security associations (SA0, SA1, SA2, etc.) that can be used sequentially during subsequent handoffs without re-running the authentication protocol, thus reducing computational burden and delay
Solution Approach 2:
The patent segments the session key generation process by dividing it into multiple independent security associations, each with its own key material. This segmentation allows the system to use different security associations for different handoff events, enabling parallel preparation of key materials while maintaining the simplicity of a single authentication protocol instance
2Productivity
If secondary session keys are generated from a primary session key to avoid repeating protocols, then handoff speed improves, but cryptographic strength is compromised
Solution Approach 1:
The patent uses preliminary action to generate multiple full-strength security associations during the initial authentication phase, before any handoffs occur. Each security association is generated with complete cryptographic strength using the full GKE protocol key derivation process, ensuring that no weakening occurs during subsequent handoff operations
Solution Approach 2:
The patent applies parameter changes by varying the context information (such as different base station identifiers, time stamps, or random nonces) in the key derivation function for each security association. This ensures that each derived key is cryptographically independent and maintains full strength, while still being generated from the same PMK without repeating the full authentication protocol
3Reliability
If multiple instances of the GKE protocol are executed to generate multiple security associations, then security is maintained, but computational overhead and processing time increase
Solution Approach 1:
The patent merges multiple key generation operations into a single GKE protocol instance by extending the key derivation function to produce multiple security associations in one execution. Instead of running the protocol separately for each handoff, the system combines multiple key derivation operations into one unified process during initial authentication, significantly reducing computational overhead
Solution Approach 2:
The patent makes the single GKE protocol instance multi-functional by configuring it to generate multiple security associations that can serve different handoff scenarios. This universal approach allows one protocol execution to fulfill the security requirements for multiple future handoff events, eliminating the need for separate protocol instances
Data Source
AI summary
A single instance of a session key generation protocol is executed in a manner that generates a plurality of security associations between user equipment and a first network element of a communication system. In one aspect, a first one of the security associations is utilized to secure data sent between the user equipment and the first network element in an ongoing communication. In conjunction with a handoff of the ongoing communication from the first network element to a second network element of the communication system, another one of the security associations is selected, and the other selected security association is utilized to secure data sent between the user equipment and the second network element in the ongoing communication. The security associations may comprise respective sets of session keys derived from a single pairwise master key.