Wireless Module Key Leakage Prevention via Intermediary Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless communication systems, there is a risk of leakage of shared and private keys due to operations such as module substitution, mode changes, and referencing communication contents via a connection bus, which compromises security.
Innovation Solution
The solution involves encrypting information indicating the operation mode using a third key and transmitting it via a connection bus, causing at least one module to delete its set key when the operation mode is not in a secure mode, thereby preventing key leakage during module substitution, mode changes, or when communication contents are referenced.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the public key encryption processing module and the wireless communication module are provided separately with a connection bus, then module substitution and operation mode changes are enabled, but key leakage risk increases due to accessible communication contents
Solution Approach 1:
The system performs preliminary encryption of communication contents between modules using a third key before transmission via the connection bus. This preliminary protective action ensures that even if modules are substituted or communication is referenced, the key information remains protected from leakage.
Solution Approach 2:
A third key is introduced as an intermediary encryption layer between the public key encryption processing module and the wireless communication module. This intermediary key protects the communication contents transmitted over the connection bus, preventing direct access to sensitive key material while enabling module substitution and mode changes.
2Ease of operation
If debug mode or other operation modes are enabled for module flexibility, then ease of operation improves, but key leakage risk increases due to accessible key information
Solution Approach 1:
Communication contents including any key information are pre-encrypted with a third key before being transmitted between modules, regardless of the operation mode. This ensures that even when debug mode or other flexible operation modes are enabled, the key information remains protected from leakage.
Solution Approach 2:
The system changes the encryption parameter by introducing a third key specifically for protecting communication contents between modules. This additional encryption layer maintains security while allowing operation mode flexibility, as the third key protects against key leakage regardless of which mode is active.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A wireless communication apparatus includes a first module that stores a first key used to encrypt and decrypt communication contents, a second module that stores a second key used to encrypt and decrypt the first key, the first key being encrypted in accordance with a public key encryption scheme, and a connection bus that connects the first module and the second module to each other. Each of the first module and the second module include an encryption processing unit that encrypts and decrypts information, which is transmitted and received via the connection bus, by using a third key that is different from the first key and the second key. Both the first module and the second module obtain an operation mode indication from their memory and, if a non-secure mode is indicated, they respectivelly delete the third key and the second key together with the third key. In addition the second module also deletes the third and the second key when it decrypts encrypted information received from the first module and the decrypted information indicates a non-secure mode.