Smart Card Reader Randomness Pool for Wireless Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communication links are insecure and vulnerable to attacks, particularly due to the lack of robust cryptographic key randomness, which compromises the security of encrypted channels.
Innovation Solution
A system that utilizes a randomness pool maintained by a smart card reader, which incorporates various sources of randomness, such as manufacturing inputs, out-of-band communication, secure wireless transmission, traffic from smart cards, and session keys, to generate and enhance the randomness of cryptographic keys for securing wireless communication links between devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic keys are generated for securing wireless communication links, then security of the communication link is improved, but the randomness quality of the keys may be insufficient making them vulnerable to attacks
Solution Approach 1:
The system performs preliminary actions by gathering randomness from multiple sources (manufacturing inputs, out-of-band communication, secure wireless transmission, smart card traffic, session keys) before cryptographic key generation. This ensures high-quality randomness is available when keys need to be created, resolving the contradiction between security requirements and randomness quality.
Solution Approach 2:
The patent combines multiple randomness sources into a unified randomness pool used for cryptographic key generation. By merging diverse inputs (manufacturing data, communication traffic, external random sources) into a single pool, the system achieves both security improvement and high randomness quality simultaneously.
2Manufacturing precision
If multiple sources of randomness are incorporated into a randomness pool, then the randomness quality of cryptographic keys is improved, but the system complexity increases
Solution Approach 1:
The smart card reader is designed with multi-functionality, serving both as a traditional smart card interface device and as a randomness gathering system. By making the reader universal, it can handle multiple randomness sources (smart card traffic, out-of-band communication, secure wireless transmission) without requiring separate dedicated hardware for each source, thus improving randomness quality while limiting complexity increase.
Solution Approach 2:
The system uses its own operational traffic (smart card transactions, communication sessions) as randomness sources. This self-service approach allows the system to generate high-quality randomness using data already being processed during normal operation, avoiding the need for additional dedicated randomness generation hardware and reducing overall system complexity.
Data Source
AI summary
A device coupled to a smart card reader may request random data from a smart card inserted into the smart card reader, and the smart card reader may incorporate the random data into its randomness pool. A device having a source of random data may have a driver installed thereon for another device and the driver may extract random data from the source and transmit it securely over a wireless communication link to the other device. The other device, which may be a smart card reader, may incorporate the extracted random data into its randomness pool. A smart card reader may incorporate traffic received from a smart card inserted therein into its randomness pool.