Temporary Network Key Generation for Mesh Synchronization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In large-scale mesh networks, frequent updates of network keys for encryption and authentication lead to increased communication load and synchronization issues, particularly due to delays and power-saving modes of communication terminals.

Innovation Solution

A communication terminal generates a temporary network key using a master network key and its identification, which is inserted into communication frames, allowing for secure communication without the need for frequent key updates across all terminals.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the network key is frequently updated to enhance security, then security assurance is improved, but communication load increases and synchronization becomes difficult

Engineering Contradiction:
Improvesecurity assuranceVSAvoidcommunication load
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent divides the network key into two segments: a master network key that is updated infrequently and a temporary network key that is derived from the master key and updated frequently. This segmentation allows the system to maintain security through frequent key changes while avoiding the communication overhead of redistributing the master key to all nodes.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent extracts the frequent update function from the master network key by creating a separate temporary network key that is derived from the master key. The temporary key carries the frequent update burden, while the master key remains stable and is only updated periodically, thus separating the security function from the communication load.

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If the network key is frequently updated to prevent key analysis attacks, then security is improved, but terminal synchronization fails due to delays and power-saving modes

Engineering Contradiction:
Improvesecurity against key analysisVSAvoidterminal synchronization
Core Design Contradiction:
ReliabilityVSStability of the object's composition

Solution Approach 1:

The patent segments the key into master and temporary components, where only the temporary key needs to be synchronized across all terminals frequently. The master key serves as a stable reference that is updated infrequently, allowing terminals to operate asynchronously without losing security.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The temporary network key is pre-derived from the master network key using a key derivation function. This preliminary action allows terminals to generate the current temporary key locally without waiting for broadcast updates, ensuring synchronization even when terminals are in power-saving modes or experience communication delays.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If broadcast traffic is increased to distribute updated network keys, then key updates are achieved, but communication load on the network increases

Engineering Contradiction:
Improvekey update capabilityVSAvoidcommunication load
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent extracts the key update distribution function from the broadcast traffic by having terminals derive the temporary key locally from the master key. This eliminates the need for continuous broadcast of key updates across the entire network, significantly reducing communication load while maintaining key update capability.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

Each terminal performs self-service by locally deriving the temporary network key from the master key using a key derivation function. This eliminates the need for centralized key distribution through broadcast traffic, allowing terminals to independently generate the current key without network overhead.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS9059839B2Communication terminal using a temporary network key for assembling a secure communication frame
Publication Date: 2015.06.16 OKI ELECTRIC INDUSTRY CO LTD
  • US9059839B2 patent drawing
  • US9059839B2 patent drawing
  • US9059839B2 patent drawing

AI summary

A communication terminal generates a temporary network key based on a managed master network key and on key identification used for security processing on a communication frame. The security processing is performed on the communication frame using the temporary network key. A secure communication frame is produced in which the identification of the key is indicated.