The cryptoboundary concept

An of great weight side effect of AAA is often the provisioning of a shared key in the access network and limiting. The shared key is established as far as concerns data origin authentication and protection of premises over the wireless link. During guide provisioning, the entities that have entry to the shared secret need to exist strictly controlled. Unauthorized access to a shared recondite during provisioning can be controlled by providing  protection on messages between the key supplier and a retainer , if the key is generated ~ means of one party to the conversation and provisioned transversely the network to the other.
An uniform more effective way to limit unlicensed access is to derive the sitting keys in parallel on the wireless bounding and in the network using an algorithmic derivation from a preshared mysterious, as described in Chapter 1. No  vital is distributed over the network. Parties that be in want of access to the key but cheat not have access to the prolix-term secret can be provisioned through the key over the network, considered in the state of long as  and data origin attestation are maintained on the network business. Periodically, the two sides re-receive the session keys to reduce exposing. to key compromise.

Even if meet security measures are taken to restriction unauthorized access during provisioning, one junto in the conversation could still be turned into compromised at some point after the guide has been provisioned. Re-deriving the elucidation periodically helps reduce the time bound in which compromise goes undetected, considering the time period will be limited ~ means of the validity duration of the session key, unless, of course, the compromised individual has access to the long-name secret. The renewal period can have existence related to the probability of ruffian-force compromise, or the period be possible to be set based on system charge considerations if the key size is comprehensive and therefore the probability of inarticulate-force compromise relatively small.

Reducing the enumerate of entities that have access to a provisioned, shared key can limit the size of the in posse target population for an attacker. Fewer entities through access the shared key mean fewer targets in opposition to an attacker. The number of entities that regard access to a shared key is called the cryptoboundary of the explanation. The cryptoboundary is a useful universal for limiting the extent of a possible key compromise. Ideally, in the process shared key architecture, the cryptoboundary encompasses excepting that the two parties havaccess to the lock opener. In public key architectures, the cryptoboundary is usually restricted to a separate node, the node that generated and possesses the confidential key corresponding to the public explanation. Fewer nodes having access to a key results in less damage should key have ~ing compromised.