Military Communications and Information Technology: A Trusted ...

Improving the Efficiency of Cryptographic
Data Management by Using an Adaptive
Method of Planning
Tomasz Czajka, Wojciech Oszywa, Michał Gawroński, Rafał Gliwa
Cryptology Department, Military Communication Institute, Zegrze, Poland,
{t.czajka, w.oszywa, m.gawronski, r.gliwa}@wil.waw.pl
Abstract: The Electronic Cryptographic Data Management System (ECDMS) is designed for secure
and correct preparation of cryptographic data. The process of preparation consists of three stages
generally: planning of secure connections, generation of required keys and distribution of produced
data to points of exploitation. These steps have to be perform sequentially. The planning can be realized
by “according to needs” or “each to each” method. First method is inconvenient in use while
second one extends time of data generation significantly. However the distribution process takes still
the most of time. Till now distribution was realized by couriers. Nowadays, thanks to available secure
telecommunication infrastructure, distribution can be realized in electronic way. A replacement
of courier distribution with electronic one enables to improve efficiency and flexibility of ECDMS.
Time of delivery data to devices is negligibly short and, in consequence, processes of planning and
generation became a bottle neck in this case. In the article we will prove that in extreme situations
method “according to needs” is impracticable and use of “each to each” method causes that time of data
generation is unacceptably long. In answer to these difficulties we propose new method of secure
connections planning called adaptive method. It combines advantages of two previous methods and
eliminates disadvantages. One, crucial requirement for using this method is availability of communication
infrastructure that will allow ECDMS to monitor work of supported devices.
Keywords: Cryptographic data management, key generation, adaptive method
I. Introduction
A correct operation of data protection systems depends on an appropriate
preparation of cryptographic data. There are special dedicated systems, called
Electronic Cryptographic Data Management Systems (ECDMS), which are responsible
for realization of this goal. An example of such system is commonly
known American EKMS i.e. Electronic Key Management System. The specific tasks
of the ECDMS can be very different and depend on the requirements of the concrete
data protection system. Additionally, development of data protection systems
implies the need of increasing an efficiency of ECDMS.