UWB Session Key Sharing via NFC and Key Derivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional ultra-wideband (UWB) communication systems face security threats due to the need for multiple round-trip signal transmissions and certificate-based authentication, which are time-consuming and computationally expensive, making them vulnerable to interception and data breaches, especially in proximity-based transactions.
Innovation Solution
A method for establishing a shared session key between devices using a single round-trip signal transmission, eliminating the need for certificates by employing Near Field Communication (NFC) tags and key derivation functions, allowing devices to generate and verify symmetric session keys independently for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple round-trip signal transmissions and certificate-based authentication are used, then security is improved, but authentication time and computational cost increase
Solution Approach 1:
The patent applies preliminary action by pre-sharing public keys between devices before the actual communication session. During authentication, devices can immediately use these pre-established keys to generate session keys without requiring multiple round-trip certificate verifications, thus reducing authentication time while maintaining security through the preliminary key establishment phase
Solution Approach 2:
The patent extracts and eliminates the certificate-based authentication mechanism from the UWB communication flow, replacing it with a simplified key exchange process. By removing the certificate verification step entirely and using only public key sharing followed by session key derivation, the system reduces computational overhead and authentication time while maintaining adequate security
2Reliability
If multiple round-trip signal transmissions and certificate-based authentication are used, then security is improved, but computational cost increases
Solution Approach 1:
The patent removes the computationally expensive certificate-based authentication from the UWB protocol, replacing it with a lightweight public key sharing and session key derivation mechanism. This extraction of the heavy cryptographic verification step significantly reduces computational cost and energy consumption while maintaining security through proper key management
Solution Approach 2:
The patent uses copying by having devices share public keys that can be replicated and used by multiple parties without requiring each device to perform full certificate verification. The session keys derived from these public keys serve as efficient copies that enable secure communication without the overhead of original certificate-based authentication
3Reliability
If certificate-based authentication is used, then security is improved, but data storage requirements increase
Solution Approach 1:
The patent extracts and removes certificate data from the storage requirements of UWB devices. By eliminating the need to store and process certificate files, the system significantly reduces data storage requirements while maintaining security through the use of compact public key representations that are much smaller than full certificate structures
Data Source
AI summary
Aspects of the disclosure include a shared session key generation scheme. A method for a shared session key generation scheme includes retrieving, by a first device, a public key of a second device. The first device can generate a first session key, based at least in part on the public key of the second device and a private key of the first device. The first device can establish a secure session with the second device based at least in part on generating the first session key. The first device can receive a message from the second device via the secure session, the message being encrypted by a second session key generated by the second device, the first session key being a duplicate of the second session key. The first device can decrypt the message using the first session key.