Modulated Waveform Encryption With Dynamic Key Rotation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing asymmetric cryptographic systems, such as SSL and TLS, face challenges with digital certificate installation and management on secure electronic devices, particularly in IoT devices, and are vulnerable to attacks like man-in-the-middle attacks and compromised certificate authorities, with extended communication sessions providing opportunities for encryption compromise.
Innovation Solution
A key delivery system utilizing a Token-Key Exchange Management (TKEM) system that provides secure delivery of multiple cryptographic keys within a single communication session without relying on Public Key Infrastructure (PKI), employing a streaming encryption scheme and dynamic key changes to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric cryptographic schemes (SSL/TLS) are used for encryption, then secure message transmission is achieved, but digital certificate installation and management becomes complex and costly
Solution Approach 1:
The patent extracts the cryptographic key delivery function from the complex PKI infrastructure, using a simplified token-based system where keys are delivered through a token authority without requiring digital certificates on devices. This removes the certificate installation and management complexity while maintaining secure transmission.
Solution Approach 2:
The patent introduces a token authority as an intermediary that manages key delivery. Instead of devices managing their own certificates, the token authority acts as a mediator that issues tokens containing key information, simplifying the system architecture and removing the need for complex certificate infrastructure.
2Device complexity
If a single cryptographic key is used for extended communication sessions, then key management is simplified, but vulnerability to attacks increases over time
Solution Approach 1:
The patent implements dynamic key changes during communication sessions. The token authority can issue new tokens with updated keys at any time, making the key management system adaptive and responsive to security threats. This dynamic approach maintains simplicity while reducing vulnerability over extended sessions.
Solution Approach 2:
The system performs periodic key rotation by issuing new tokens at predetermined time intervals or based on triggering events. This periodic action ensures that even in extended communication sessions, the cryptographic keys are refreshed regularly, maintaining security without complicating management.
3Reliability
If multiple cryptographic keys are used within a single communication session, then encryption strength is enhanced, but key delivery and management complexity increases
Solution Approach 1:
The token authority serves multiple functions: it issues tokens, manages key delivery, rotates keys, and handles security for multiple communication sessions. This multi-functional approach allows the system to use multiple keys for enhanced encryption strength while avoiding the complexity of separate key management systems for each function.
Solution Approach 2:
The patent uses token copies that contain key information. Instead of managing multiple complex key distribution systems, the token authority creates token copies that can be distributed to devices. These tokens serve as portable key carriers, simplifying delivery while enabling multiple keys to be used within a session for enhanced security.
Data Source
AI summary
Embodiments of an automatic key delivery system and methods of use are described. One computerized method utilizing an automatic key delivery system includes operations of establishing, by a first network device, a communication session with a second network device, transmitting first content to the second network device during the communication session, wherein the first content is encrypted with a first encryption format, and transmitting second content to the second network device during the communication session, wherein the second content is encrypted with a second encryption format. The computerized method may further includes operations of receiving, from the second network device, third content during the communication session, wherein the third content is encrypted with the first encryption format, and decrypting the third content using a first cryptographic key corresponding to the first encryption format.