Wireless Key Provisioning via Separate Secure Connection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Provisioning and managing cryptographic keys for communication networks is inefficient and insecure, often requiring user-assisted methods like QR codes or NFC tags.
Innovation Solution
Utilizing different wireless communication technologies for establishing secure connections with a key management service to negotiate authentication information, ensuring high security and efficiency by separating the communication technology used for provisioning from the technology used for device communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If user-assisted methods like QR codes or NFC tags are used for key provisioning, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent segments the communication process into two distinct phases using different wireless technologies: a first wireless technology for secure key provisioning and a second wireless technology for subsequent data communication. This segmentation allows each phase to use the most appropriate technology for its specific security and performance requirements, resolving the contradiction between ease of operation and security.
Solution Approach 2:
The patent introduces a key management service as an intermediary that facilitates secure key provisioning between the server and communication devices. This intermediary uses a first wireless technology to establish secure connections and provision authentication information, eliminating the need for direct user-assisted methods while maintaining high security standards.
2Device complexity
If the same wireless communication technology is used for both provisioning and communication, then device complexity is reduced, but productivity is worsened
Solution Approach 1:
The patent implements multi-functionality by enabling communication devices to operate with multiple wireless communication technologies: a first wireless technology for secure key provisioning and management operations, and a second wireless technology for high-performance data communication. This allows the system to optimize each function for its specific requirements while maintaining overall system efficiency.
3Ease of operation
If secure connections are established using the same technology as device communication, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent segments the communication process into two distinct phases using different wireless technologies: a first wireless technology for secure key provisioning and a second wireless technology for subsequent data communication. This segmentation allows each phase to use the most appropriate technology for its specific security and performance requirements, resolving the contradiction between ease of operation and security.
Data Source
AI summary
The present disclosure relates to a method for performing key management for a plurality of communication devices, each of the plurality of communication devices being configured to perform wireless communication using a first wireless communication technology. The method comprises establishing, by at least one of the plurality of communication devices, a first secure connection with a key management service using a second wireless communication technology. The method further comprises negotiating, by the at least one communication device with the key management service using the first secure connection, first authentication information comprising a first authentication bundle for secure communication and/or data protection on the first wireless communication technology.