Symmetric key generation, authentication and communication between a plurality of entities in a network
A method is provided for distributed symmetric key generation by a plurality of entities in a network comprising, for each entity, creating a part of the symmetric key, broadcasting the part of the symmetric key to each other entity of the plurality of entities, receiving parts of the symmetric key from each other entity of the plurality of entities, generating the symmetric key from the part of the symmetric key of the entity and at least some of the parts of the symmetric key of each other entity of the plurality of entities. An authentication method is also provided for authenticating a plurality of entities in a network
1 . A method for distributed symmetric key generation by a plurality of entities in a network comprising each entity of the plurality of entities generating the same symmetric key, by:
each entity receiving a secret shared by each entity of the plurality of entities;
each entity encrypting the shared secret using an encryption algorithm and a fingerprint of the entity;
each entity decrypting the shared secret using a re-generated fingerprint of the entity creating a part of the same symmetric key using the decrypted shared secret;
each entity broadcasting the part of the same symmetric key to each other entity of the plurality of entities;
each entity receiving a part of the same symmetric key from each other entity of the plurality of entities; and
each entity decrypting the shared secret using a further re-generated fingerprint of the entity and generating the same symmetric key from the part of the same symmetric key created by the entity and each part of the same symmetric key received from each other entity of the plurality of entities using the decrypted shared secret.
2 . The method for distributed symmetric key generation according to claim 1 in which creating the part of the symmetric key comprises each entity generating a nonce and encrypting the nonce.
3 . The method for distributed symmetric key generation according to claim 2 in which creating the nonce comprises each entity generating a random number and encrypting the random number.
4 . The method for distributed symmetric key generation according to claim 3 in which encrypting the random number comprises using a secret shared by each entity of the plurality of entities as an encryption key.
5 . The method for distributed symmetric key generation according to claim 4 in which broadcasting the part of the symmetric key to each other entity of the plurality of entities comprises broadcasting an encrypted random number of the entity to each other entity of the plurality of entities.
6 . The method for distributed symmetric key generation according to claim 1 in which receiving a part of the same symmetric key from each other entity of the plurality of entities comprises receiving an encrypted random number from each other entity of the plurality of entities.
7 . The method for distributed symmetric key generation according to claim 6 in which the encrypted random number from each other entity is encrypted using the secret shared by each entity of the plurality of entities as an encryption key.
8 . The method for distributed symmetric key generation according to claim 6 in which generating the same symmetric key from the part of the same symmetric key of the entity and each part of the same symmetric key of each other entity of the plurality of entities comprises using the random number of the entity and at least some of the encrypted random numbers of each other entity of the plurality of entities.
9 . The method for distributed symmetric key generation according to claim 8 in which generating the same symmetric key by using the random number of the entity and at least some of the encrypted random numbers of each other entity of the plurality of entities comprises decrypting the at least some of the encrypted random numbers of each other entity of the plurality of entities, generating a key seed by calculating a combination function of the random number of the entity and the decrypted random numbers, and generating the same symmetric key by calculating a combination function of the secret shared by each entity and the key seed and calculating a mapping function of the combination of the secret shared by each entity and the key seed.
10 . An entity symmetric key generation system of each entity of a plurality of entities in a network each generating the same symmetric key, comprising:
an input/output device configured to receive a secret shared by each entity of the plurality of entities;
a processor configured to control operation of the system to encrypt the shared secret using an encryption algorithm and a fingerprint of the entity;
wherein the processor is configured to decrypt the shared secret using a re-generated fingerprint of the entity and to control operation of the system to create a part of the same symmetric key using the decrypted shared secret;
wherein the input/output device is configured to broadcast the part of the same symmetric key to each other entity of the plurality of entities and to receive a part of the same symmetric key from each other entity of the plurality of entities; and
wherein the processor is configured to control operation of the system to decrypt the shared secret using a further re-generated fingerprint of the entity and generate the same symmetric key from the part of the same symmetric key of the entity and each part of the symmetric key of each other entity of the plurality of entities using the decrypted shared secret.
11 . A vehicle comprising a plurality of entities, wherein each entity comprises an entity symmetric key generation system according to claim 10 .