Systems and methods for continuous generation and management of ephemeral cryptographic keys
A cryptographic management key system is disclosed for providing secure communication in a cryptographic system. The cryptographic key management system includes a plurality of communication apparatuses under the control of a common control console, each communication apparatus being in communication with at least one source of dynamic random or pseudo-random information via the common control console, and communication paths among the plurality of communication apparatuses, said communication paths including a control plane, a random information plane and a data plane.
1. A cryptographic key management system for providing secure communication in a cryptographic system, said cryptographic key management system comprising:
a plurality of communication apparatuses under the control of a common control console, each communication apparatus being in communication with at least one source of dynamic random or pseudo-random information via the common control console; and
communication paths among the plurality of communication apparatuses, said communication paths including a control plane, an entropy plane and a data plane, the entropy plane being in communication with a multi-dimensional storage array of the control console, the multi-dimensional storage array for storing source entropy data that is indexed in discrete quantities, each discrete quantity being stored for single use, the common control console providing the stored entropy data from the multi-dimensional storage array to the plurality of communication apparatuses using the entropy plane, the data plane providing secure communication in the cryptographic system using stored entropy data from the multi-dimensional storage array.
2. The cryptographic key management system of claim 1 , wherein the at least one source of dynamic random or pseudo-random information comprises random information generators.
3. The cryptographic key management system of claim 2 , wherein the at least one source of dynamic random or pseudo-random information comprise random information generators include any of quantum random number generators and algorithmic random number generators and naturally chaotic non-linear random number generators.
4. The cryptographic key management system of claim 1 , wherein the at least one source of dynamic random or pseudo-random information comprises one or more databases containing random information.
5. The cryptographic key management system of claim 1 , wherein the at least one source of dynamic random or pseudo-random information comprises one or more quantum random number generators.
6. The cryptographic key management system of claim 1 , wherein the underlying cryptographic system is advanced encryption standard (AES).
7. The cryptographic key management system of claim 1 , wherein the cryptographic system is Rivest-Shamir-Adelman (RSA).
8. The cryptographic key management system of claim 1 , wherein the cryptographic system is elliptical curve cryptography (ECC).
9. A key management system for continuous generation of disposable cryptographic keys for an underlying cryptographic system, said key management system comprising:
at least one entropy source of raw entropy that provides the source of information to generate random information or pseudo-random information;
an entropy multiplexer that combines raw entropy from the at least one entropy source;
a key material loader that formats raw key material;
a key material database that receives the raw entropy from the key material loader and stores the raw entropy in discrete indexed quantities so that each indexed quantity can be accessed randomly via index positions and is information shuffled relative to any other indexed position in the database; and
a key material management and synchronization system that performs as a system controller of a network system to distribute to the raw entropy data for continuous generation of disposable cryptographic keys for the underlying cryptographic system.
10. The key management system of claim 9 , wherein the at least one entropy source comprises a random information generator.
11. The key management system of claim 10 , wherein the at least one entropy source comprises random information generators including any of quantum random number generators and algorithmic random number generators and naturally chaotic non-linear random number generators.
12. The key management system of claim 9 , wherein the at least one entropy source may comprise one or more databases containing random information.
13. The key management system of claim 9 , wherein the at least one entropy source may comprise one or more quantum random number generators.
14. The key management system of claim 9 , wherein the underlying cryptographic system is advanced encryption standard (AES).
15. The key management system of claim 9 , wherein the underlying cryptographic system is Rivest-Shamir-Adelman (RSA).
16. The key management system of claim 9 , wherein the underlying cryptographic system is elliptical curve cryptography (ECC).
17. A method for producing ephemeral, disposable cryptographic keys in an underlying cryptographic system, said method comprising:
selecting one or more sources of random information or pseudo-random information;
multiplexing the random information or pseudo-random information in a pre-defined or arbitrary manner;
formatting the random information or pseudo-random information for storage in a random access database;
shuffling and/or re-indexing the information in the random-access database relative to its index positions;
formatting the shuffled random information from the database to form an ephemeral, disposable cryptographic key and an initialization vector;
sending the formatted ephemeral, disposable cryptographic key and the initialization vector to the underlying cryptographic system;
selecting the format for upper layer payload data packets;
disassembling the upper layer payload data packets into sub-packets that are transported by the underlying cryptographic system; and
assembling the sub-packets arriving from the underlying cryptographic system into decrypted payload packets that are then passed to the upper layer payload data packets.
18. The method of claim 17 , wherein the underlying cryptographic system is advanced encryption standard (AES).
19. The method of claim 17 , wherein the underlying cryptographic system is Rivest-Shamir-Adelman (RSA).
20. The method of claim 17 , wherein the underlying cryptographic system is elliptical curve cryptography (ECC).
21. The method of claim 17 , wherein the upper layer payload packets may refer to Transmission Control Protocol (TCP), User Datagram Protocol (UDP), or other Transport Layer data packets.
22. The method of claim 17 , wherein the upper layer payload packets may refer to any other type of data packet format originating or terminating in any logical layer of the network.