SECRET KEY GENERATION

• US 20120159147A1
• Filed: 12/21/2010
• Published: 06/21/2012
• Est. Priority Date: 12/21/2010
• Status: Active Grant

• Current Assignee: Massachusetts Institute of Technology
• Original Assignee: Massachusetts Institute of Technology
• Inventors: Ando, Megumi
• Granted Patent: US 9,319,877 B2
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: H04L 2209/00 Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 9/001 using chaotic signals
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0875 based on channel impulse response [CIR]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/041 Key generation or derivation

Abstract

The technology includes a method for generating a secret key. The method includes receiving initialization data, the initialization data includes an initialization packet and a transmission path channel response; generating sample data based on the transmission path channel response; and generating a secret key based on the sample data utilizing a chaotic map.

Claims

1. A method for generating a secret key, the method comprising:

receiving initialization data, the initialization data comprises an initialization packet and a transmission path channel response;

generating sample data based on the transmission path channel response; and

generating a secret key based on the sample data utilizing a chaotic map.

2. The method of claim 1, wherein generating the sample data further comprises:

sampling the transmission path channel response to identify a plurality of sample parts;

decorrelating the identified plurality of sample parts; and

normalizing the decorrelated plurality of sample parts to form the sample data.

3. The method of claim 1, wherein generating the processed sample data further comprises sampling the transmission path channel response to identify a plurality of sample parts in the sample data.

4. The method of claim 3, wherein sampling the transmission path channel response utilizes linear predictive coding.

5. The method of claim 1, wherein generating the secret key further comprises:

separating the sample data into a plurality of sample parts;

multiplying each of the plurality of sample parts with a noise factor;

modifying each of the plurality of multiplied sample parts based on a key size; and

combining each of the plurality of modified sample parts to form the secret key.

6. The method of claim 1, wherein the chaotic map is a binary shift map, a tent map, or a chaotic logistic map.

7. The method of claim 1, further comprising transmitting a reciprocal initialization packet based on the initialization packet.

8. The method of claim 7, further comprising generating the reciprocal initialization packet based on an identification of the transmission path channel response in the initialization data, the reciprocal initialization packet is substantially the same as the initialization packet.

9. The method of claim 7, further comprising:

determining if a confirmation packet is received in response to the transmission of the reciprocal initialization packet; and

transmitting a second initialization packet if the confirmation packet is not received.

10. The method of claim 1, further comprising:

encrypting transmission payload data based on the secret key; and

transmitting the encrypted payload data to a device used to transmit the initialization packet.

11. A computer program product, tangibly embodied in an information carrier, the computer program product including instructions being operable to cause a data processing apparatus to:

receive initialization data, the initialization data comprising an initialization packet and a transmission path channel response;

generate processed sample data based on the transmission path channel response; and

generate a secret key based on the processed sample data utilizing a chaotic map.

12. A system for generating a secret key, the system comprising:

a first device comprising;

a first communication module configured to transmit an initialization packet and receive reciprocal initialization data, the reciprocal initialization data comprises a reciprocal initialization packet and a reciprocal transmission path channel response;

a first sample processing module configured to generate a first set of sample data based on the reciprocal transmission path channel response; and

a first secret key generation module configured to generate a first secret key based on the first set of sample data utilizing a first chaotic map, and a second device comprising;

a second communication module configured to transmit the reciprocal initialization packet and receive initialization data, the initialization data comprising the initialization packet and a transmission path channel response;

a second sample processing module configured to generate a second set of sample data based on the transmission path channel response; and

a second secret key generation module configured to generate a second secret key based on the second set of sample data utilizing a second chaotic map.

13. The system of claim 12, wherein the first secret key is the same as the second secret key.

14. The system of claim 12, wherein the first chaotic map is the same as the second chaotic map.

15. The system of claim 12,

wherein the first device further comprises a first data stream encryption module configured to encrypt a data stream based on the first secret key;

and

wherein the first communication module is further configured to transmit the encrypted data stream to the second device, and

wherein the second communication module is further configured to receive encrypted data stream transmitted from the first device and

wherein the second device further comprises a second data stream encryption module configured to decrypt the received encrypted data stream based on the second secret key.

16. The system of claim 15,

wherein the second data stream encryption module is further configured to encrypt a second data stream based on the second secret key and the second communication module is further configured to transmit the encrypted second data stream to the first device;

and

wherein the first communication module is further configured to receive the second encrypted data stream transmitted from the second device and the first data stream encryption module is further configured to decrypt the received encrypted second data stream based on the first secret key.

17. The system of claim 12,

wherein the first device further comprises a first data stream encryption module configured to encrypt a confirmation packet based on the first secret key;

and

wherein the first communication module is further configured to transmit the encrypted confirmation packet to the second device, and

wherein the second communication module is further configured to receive the encrypted confirmation packet transmitted from the first device;

wherein the second device comprises;

a second data stream encryption module configured to determine if the received encrypted confirmation packet is encrypted based on the second secret key; and

an initialization generation module configured to generate a second initialization packet based on the determination if the received encrypted confirmation packet is encrypted based on the second secret key.

18. The system of claim 17, wherein the second communication module is further configured to transmit the second initialization packet to the first device.

19. The system of claim 12, wherein the second device further comprises:

an initialization generation module configured to generate the reciprocal initialization packet based on the initialization packet.

20. The system of claim 12, wherein the first device is a first wireless communication device and the second device is a second wireless communication device.