Updatable Encryption Key Using Segmented Update Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption methods are not resilient to quantum computer-based attacks and lack maturity, with new methods potentially introducing noise and limited updates, which can lead to security issues and information leakage.
Innovation Solution
A method and system for updating encryption keys using multiple update tokens to generate new keys, where the initial key is updated to create a second updated key, minimizing noise propagation and security risks, allowing for secure encryption and decryption in noisier schemes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If new encryption methods are used to achieve quantum resilience, then security against quantum attacks is improved, but noise and error propagation increase
Solution Approach 1:
The encryption key is segmented into multiple components (initial key, first update token, second update token) that can be independently managed and updated. This segmentation allows the system to refresh key material without propagating noise through the entire key lifecycle, thereby maintaining quantum resilience while controlling noise accumulation.
Solution Approach 2:
Update tokens are generated in advance and stored securely before being applied to the encryption key. This preliminary preparation allows the system to perform key updates without real-time computation that could introduce noise, separating key generation from key application phases.
2Reliability
If encryption keys are updated multiple times to maintain security, then security is improved, but information leakage risk increases
Solution Approach 1:
The update tokens are extracted as separate, self-contained entities that can be independently verified and applied. Each token contains only the necessary information for a single key update operation, allowing the system to perform multiple updates while minimizing the exposure of sensitive key material and reducing information leakage risks.
3Ease of operation
If update tokens are reused to simplify operations, then ease of operation is improved, but security decreases
Solution Approach 1:
Each update token is designed as a disposable, single-use object that is generated, applied, and then discarded. This approach maintains security by ensuring each token can only be used once, preventing replay attacks, while keeping operations simple through automated token generation and application processes.
4Reliability
If larger key sizes are used to enhance security, then security is improved, but device complexity increases
Solution Approach 1:
Different parts of the key management system handle different aspects of key security with specialized functions. Update tokens manage the complexity of large key sizes by providing a standardized interface for key updates, while the actual key material can be arbitrarily large without proportionally increasing system complexity.
Data Source
AI summary
Described herein are methods and systems for updating encryption keys. The updating may comprise application of an update token to a key to generate a second key. The updating may comprise application of a second update token to the key to generate a third key. The key may be the same key in both update operations.