Symmetric Key Management via User Authentication Factors
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure data storage methods face challenges in ensuring data access security, particularly in utilizing symmetric cryptography effectively for authentication and encryption, where the key management and decryption processes are not adequately protected against unauthorized access.
Innovation Solution
The implementation of a mobile electronic device that utilizes user authentication factors (UAFs) to generate and manage symmetric keys for encryption and decryption, ensuring that only valid UAFs can decrypt the data, thereby maintaining secure data storage and transfer through symmetric cryptography.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric cryptography is used for data encryption, then data security is improved, but key management complexity increases
Solution Approach 1:
The patent introduces a key management component as an intermediary between the symmetric cryptography engine and the data storage system. This component securely generates, stores, and manages the symmetric keys, separating the key management responsibilities from the encryption/decryption operations. The intermediary protects keys from unauthorized access while enabling efficient cryptographic operations.
2Reliability
If user authentication factors are integrated into key generation, then access security is improved, but authentication process complexity increases
Solution Approach 1:
The patent merges the authentication factor verification process with the symmetric key generation process. The key generation component receives authentication factors (such as passwords, biometrics, or tokens) and integrates them directly into the key derivation function. This combination ensures that only authenticated users can generate valid decryption keys, while the unified process reduces the number of separate authentication steps.
3Reliability
If symmetric keys are derived from decryption keys using one-way functions, then decryption security is improved, but key derivation time increases
Solution Approach 1:
The patent implements preliminary key derivation during the key generation phase, where the symmetric key is pre-computed and stored in a secure key management component. When decryption is needed, the pre-derived key is already available, eliminating the need for time-consuming one-way function computations during the actual decryption process. This preliminary action shifts the computational burden to the key generation stage.
Data Source
AI summary
A device uses a user authentication factor to generate a symmetric key for use in symmetric cryptography. The user authentication factor is encrypted and stored for authentication during decryption.