Session Key Generation Using Timestamps and MAC
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encrypted communication systems face challenges in securely generating session keys over open networks, as the predictability of random values used in key generation can undermine encryption security, especially when third parties have access to stored sequences.
Innovation Solution
A method where the first node sends a timestamp and random sequence to the second node, which generates a message authentication code (MAC) using a shared secret key, allowing both nodes to generate identical session keys securely without relying on strong random number generation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If random values are generated for session keys, then session key unpredictability is improved, but predictability risk increases when stored sequences are accessed by third parties
Solution Approach 1:
The patent introduces timestamps and random sequences as intermediary elements that both nodes exchange and incorporate into session key generation. These intermediaries allow nodes to create unpredictable session keys without relying solely on stored random sequences, thereby mitigating the risk of predictability attacks while maintaining key security.
Solution Approach 2:
The patent changes the parameters used in session key generation from static stored random values to dynamic combinations of timestamps and exchanged random sequences. This parameter change ensures that session keys are unpredictable even if third parties access stored sequences, as the actual key material is derived from time-dependent and exchanged values rather than pre-stored sequences.
2Ease of operation
If session keys are shared over open networks, then encrypted communication is enabled, but exposure to cryptanalytic attacks increases
Solution Approach 1:
The patent performs preliminary authentication and key material exchange before establishing the encrypted communication session. Nodes exchange timestamps and random sequences, verify each other's identity, and establish shared secret material in advance. This preliminary action ensures that when communication begins, the session keys are already securely established and resistant to interception attacks.
Solution Approach 2:
The patent uses timestamps and random sequences as intermediary elements that facilitate secure key establishment over the open network. These intermediaries are exchanged in a controlled manner and used to derive session keys without exposing the actual key material, enabling communication while minimizing interception risk.
3Productivity
If the same key is used for encryption over time, then encryption efficiency is improved, but cryptanalytic attacks become easier
Solution Approach 1:
The patent implements dynamic session key generation where keys are continuously changed based on timestamps and exchanged random sequences. Each communication session or time period generates a new session key, preventing long-term key usage that would facilitate cryptanalytic attacks. This dynamic approach maintains encryption efficiency by using the same fast symmetric algorithms while improving security through frequent key rotation.
Data Source
AI summary
A method and apparatus for generating shared session keys. The method and apparatus does not rely on strong random number generation. The first node sends a timestamp and random sequence to the second node. The second node generates a message authentication code (MAC) using this data and a shared secret key. The MAC is then used to encrypt a reply containing a second timestamp and second random sequence from the second node. The first node receives this message and decrypts it by generating the same MAC. Both nodes then generate a session key using the shared set of timestamps and random sequences.