Wireless Public Key Exchange via Segmented Node Identification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for exchanging public keys between mobile communication devices are limited by small key sizes due to transmission constraints, inefficient use of notification message space, and potential misuse by malicious nodes, leading to security and resource issues.
Innovation Solution
A facility that splits a node's public key into two portions, where one portion is used as the node ID in notification signals and the other is sent separately, allowing for larger and more secure keys, and includes transformations like rotation or encryption to enhance security and limit access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the entire public key is sent in a single notification signal, then the key size is limited by transmission constraints, but using larger keys would improve security
Solution Approach 1:
The public key is divided into two separate portions: the first portion is included in the notification signal as the node ID, while the second portion is transmitted separately in a subsequent communication. This segmentation allows each transmission to contain only a portion of the key, avoiding transmission constraints while maintaining the ability to use larger, more secure keys.
2Ease of operation
If an arbitrary node ID is used in the notification signal, then device identification is simplified, but transmission message space is wasted
Solution Approach 1:
The first portion of the public key is merged with the node ID function in the notification signal. Instead of using a separate arbitrary node ID and wasting message space, the notification signal directly includes the first portion of the public key as the node ID, eliminating redundancy and improving message space utilization while maintaining ease of device identification.
3Ease of operation
If the public key is broadcast in cleartext, then key exchange is simplified, but malicious nodes can misuse the key
Solution Approach 1:
The public key is segmented into two portions transmitted separately. The first portion is broadcast in the notification signal as the node ID, while the second portion is sent only after authentication in a subsequent communication. This segmentation limits the information available to malicious nodes while maintaining simplified key exchange for authorized devices.
Solution Approach 2:
Authentication occurs before the second portion of the public key is transmitted. This preliminary authentication action ensures that only authorized devices can access the complete public key, preventing malicious nodes from misusing the key while maintaining ease of operation for legitimate communications.
4Speed
If the complete public key is transmitted immediately, then connection establishment is faster, but transmission and processing resources are consumed
Solution Approach 1:
The public key transmission is segmented into two phases: the first portion is transmitted immediately in the notification signal for quick connection establishment, while the second portion is transmitted only after authentication. This segmentation enables fast initial connection while conserving transmission and processing resources by avoiding the need to transmit the complete key immediately.
Data Source
AI summary
A facility operating in a first mobile communication device (MCD) is described. The facility generates a key pair made up of a private key and a public key for use by the first MCD in communicating with other MCDs. The public key has information content. The facility constructs a first public key component and a second public key component, that each encode an incomplete portion of the information content of the public key; and that collectively encode the complete information content of the public key. The facility transmits a wireless message for receipt by other MCDs; it has (1) first contents that identify the wireless message as a notification signal, and (2) as second contents, the first public key component. The second contents are located at a position in the first wireless message that identifies the second contents as the node ID of the first MCD.