Alignment Marker Encryption for Bandwidth-Efficient Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption technologies based on the MACsec protocol occupy significant user service bandwidth due to the need to carry encryption parameters in each user frame, leading to high costs and inefficiencies.
Innovation Solution
The proposed solution involves transmitting encryption parameter information within the bit locations of alignment markers (AMs) in the data stream, allowing for encryption parameter information to be carried in the AM lock information field, lane identification information field, or check information field without adding additional bandwidth, ensuring that all bits, including source and destination MAC addresses, are encrypted for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption parameters are carried in each user frame at the MAC layer, then data security is ensured, but user service bandwidth is significantly occupied and costs increase
Solution Approach 1:
The patent moves the encryption parameter transmission from the MAC layer (layer 2) to the physical layer (layer 1), changing the dimensional level of operation. By embedding encryption parameters in alignment markers at the physical layer, the solution eliminates bandwidth consumption at the MAC layer while maintaining security, as the parameters are transmitted in a different dimensional space (physical layer signaling rather than MAC layer data frames)
Solution Approach 2:
The alignment marker serves as an intermediary carrier for encryption parameters. Instead of directly embedding parameters in user frames, the patent uses alignment markers as a mediator structure that can carry parameter information without interfering with the main data transmission path, thus preserving user service bandwidth while enabling secure parameter transmission
2Reliability
If encryption parameters are transmitted in user frames, then security is maintained, but transmission efficiency decreases due to bandwidth occupation
Solution Approach 1:
By transitioning encryption parameter transmission from the MAC layer to the physical layer, the patent utilizes a different transmission dimension that does not compete with user data bandwidth. This dimensional shift allows security parameters to be transmitted without reducing transmission efficiency of user services
Solution Approach 2:
The patent segments the transmission function into two independent parts: user data transmission in the main data path and encryption parameter transmission in the alignment marker structure. This segmentation allows both functions to operate simultaneously without interfering with each other, maintaining both security and transmission efficiency
3Reliability
If all bits including MAC addresses are encrypted at the physical layer, then security is improved, but complexity of the transmission system increases
Solution Approach 1:
The patent merges the alignment function and encryption parameter transmission function into a single structure (the alignment marker). By combining these functions, the system avoids adding separate overhead structures, and the encryption parameters are transmitted using the same physical layer infrastructure already required for alignment, thus limiting the increase in system complexity
Data Source
AI summary
A first communication apparatus obtains a first ciphertext data stream, and sends the first ciphertext data stream. The first ciphertext data stream includes a first alignment marker (AM) and an encrypted first data segment. At least one of some bits in a first AM lock information field in the first AM, some bits in a first lane identification information field in the first AM, or some or all bits in a first check information field in the first AM carry encryption parameter information of the first data segment.