Synchronized Symmetric Key Generation for Secure Communication Nodes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication systems that distribute symmetric keys a priori to communication nodes are not completely secure, as unauthorized parties can decrypt encrypted data if they intercept these keys.
Innovation Solution
The method involves local generation of synchronized symmetric encryption/decryption keys by communication nodes using Ordered Sequences of Numbers (OSNs) and security transforms, allowing key changes during transmission/reception without prior key agreement, similar to Frequency Hopping techniques, ensuring secure data exchange without key exchange messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric keys are distributed a priori to communication nodes, then the risk of key interception is minimized, but the system remains vulnerable if distributed keys are eavesdropped
Solution Approach 1:
The patent implements dynamic key generation where symmetric keys are not static but continuously regenerated at both transmitting and receiving ends using synchronized timing elements. The keys change periodically according to predetermined key times, transforming the static key distribution problem into a dynamic key regeneration process that eliminates the vulnerability of a priori key distribution.
Solution Approach 2:
The patent employs periodic key regeneration based on synchronized timing elements at both ends of the communication channel. Keys are regenerated at predetermined periodic intervals (key times), creating a rhythmic pattern of key changes that ensures both transmitter and receiver use identical keys at each interval while preventing interception vulnerabilities associated with static key distribution.
2Reliability
If symmetric keys are changed during transmission, then security is enhanced, but synchronization between transmitting and receiving ends becomes critical
Solution Approach 1:
The patent establishes predetermined key times and synchronized timing elements before actual data transmission begins. Both transmitting and receiving ends are pre-configured with identical timing parameters and key generation sequences, allowing them to automatically generate matching keys at each key time without requiring real-time synchronization adjustments during transmission.
Solution Approach 2:
The patent incorporates timing synchronization mechanisms where both ends continuously monitor and adjust their timing elements to maintain precise synchronization. The synchronized timing elements provide feedback information about timing deviations, enabling automatic correction to ensure both ends generate keys at exactly the same moments despite clock drift or propagation delays.
3Productivity
If key exchange messages are eliminated, then communication efficiency is improved, but key synchronization must be achieved without direct key exchange
Solution Approach 1:
The patent enables both transmitting and receiving ends to autonomously generate identical symmetric keys through self-contained key generation mechanisms. Each end independently produces keys using its own timing element and key generation algorithm, eliminating the need for key exchange messages while ensuring both ends arrive at the same key values through synchronized periodic generation.
Solution Approach 2:
The patent transforms the key synchronization problem from a communication-based solution to a parameter-based solution. By changing the approach from exchanging key values to synchronizing generation parameters (timing elements, key times, generation algorithms), the system achieves key synchronization without requiring communication between ends, thereby improving efficiency while managing complexity through parameter standardization.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
Disclosed herein is a method for securing/unsecuring data exchanged by communication nodes. The method comprises: securing, by a first communication node (5), data to be sent to one or more second communication node(s) (8) on the basis of a specific security key, and unsecuring, by each second communication node (8), the secured data received from the first communication node (5) on the basis of said specific security key. The method is characterized by further comprising: synchronizing, by each communication node (5,8), a respective internal time reference to a global time reference so as to obtain a respective sync time reference, and extracting, by each communication node (5,8), the specific security key on the basis of the respective sync time reference from one and the same ordered sequence of security keys each of which is to be used in a respective validity time interval.