Adaptive Encryption Level Negotiation for Resource-Constrained Data Streams

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data encryption methods do not adaptively adjust encryption levels based on available resources, leading to potential degradation in video quality and reliability during data transmission, especially in client-server relationships where network bandwidth and computational resources fluctuate.

Innovation Solution

A system and method where a benchmarking engine determines the available resources on a server and client, and a negotiation engine adjusts the encryption level dynamically, ensuring that the encryption strength and type are optimized according to current resources, allowing for adaptive encryption of data streams to maintain service level agreements.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If high-level encryption is applied to data streams, then security and protection level are improved, but computational resources and processing capacity are consumed

Engineering Contradiction:
Improvedata transmission securityVSAvoidcomputational resource consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements dynamic encryption level adjustment where the encryption strength is not fixed but changes over time based on current resource availability. The system continuously monitors computational resources and network conditions, then adapts the encryption level accordingly, transitioning between different encryption strengths to balance security and resource consumption.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system changes the encryption parameter (encryption level) based on resource conditions. When resources are abundant, higher encryption levels are applied; when resources are constrained, the system reduces encryption intensity. This parameter adjustment allows the system to optimize the trade-off between security and computational overhead.

Inventive Principle:
Principle #35Parameter changes

2Productivity

If adaptive encryption adjustment is implemented, then resource efficiency is improved, but system complexity increases

Engineering Contradiction:
Improveresource utilization efficiencyVSAvoidencryption system complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent divides the encryption system into distinct functional modules: a monitoring component that tracks resource availability, a decision component that determines appropriate encryption levels, and an execution component that applies the selected encryption. This segmentation allows each module to perform its specific function independently, managing complexity through modular design.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system implements a feedback loop where the results of resource monitoring and encryption performance are continuously fed back to adjust future encryption decisions. This feedback mechanism enables the system to learn from past performance and optimize encryption levels automatically, reducing the need for complex manual configuration while maintaining resource efficiency.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS10972770B2Method for encrypting data streams with negotiable and adaptable encryption levels
Publication Date: 2021.04.06 CITRIX SYSTEMS INC
  • US10972770B2 patent drawing
  • US10972770B2 patent drawing
  • US10972770B2 patent drawing

AI summary

Described embodiments provide systems and methods for data encryption. A server communicating data with a client can determine a level of data encryption on the data that the server is capable of handling according to resources available to the server. A level of data encryption can include a type of encryption and a strength of the type of data encryption. The server can receive a level of data encryption on the data that the client is capable of handling according to resources available to the client. The server can identify a level of data encryption with which the server and the client agree to proceed, according to the determined level of data encryption and the received level of data encryption. The server, following a predefined interval, can identify an updated level of data encryption with which the server and the client agree to proceed.