Authentication Encryption Device Reducing Block Cipher Operations

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing authentication encryption algorithms require frequent key updates and involve a high number of operations in tweakable block cipher operations, leading to inefficiencies and security concerns.

Innovation Solution

An encryption system that generates a key K based on an initial parameter N, using a key generation unit and hash calculation unit to produce a ciphertext and authenticator, reducing the number of block cipher operations and enhancing security by making key estimation difficult.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If authentication encryption algorithm uses traditional block cipher operations, then security can be maintained, but the number of operations increases and efficiency decreases

Engineering Contradiction:
Improveencryption efficiencyVSAvoidsecurity upper bound value
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent changes the parameter of block cipher operations from multiple operations to a single operation. By modifying the encryption function to use only one block cipher operation instead of multiple sequential operations, the patent achieves rate-1 efficiency while maintaining security through careful design of the single operation to incorporate all necessary security functions.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent extracts and eliminates redundant operations from traditional authentication encryption algorithms. By removing unnecessary intermediate steps and consolidating security functions into a single block cipher operation, the patent reduces the total number of operations while preserving the essential security properties through the optimized structure.

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If key update frequency is increased, then security can be improved, but computational overhead and time consumption increase

Engineering Contradiction:
Improvesecurity strengthVSAvoidkey update time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent changes the parameter of key usage from frequent updates to extended usage periods. By designing a system where a single key can be used for multiple encryption operations without requiring frequent updates, the patent reduces the time loss associated with key management while maintaining security through the optimized single operation structure.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If multiple block cipher operations are performed, then security can be enhanced, but the rate decreases and efficiency is reduced

Engineering Contradiction:
Improvesecurity boundVSAvoidencryption rate
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the security functions into a single integrated block cipher operation. Instead of performing multiple separate operations for different security purposes, the patent combines these functions into one unified operation that achieves the same security bound with rate-1 efficiency by carefully designing the input processing and transformation steps.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11349668B2Encryption device and decryption device
Publication Date: 2022.05.31 MITSUBISHI ELECTRIC CORP
  • US11349668B2 patent drawing
  • US11349668B2 patent drawing
  • US11349668B2 patent drawing

AI summary

An encryption device (10) is an encryption device in authentication encryption. A key generation unit (21) generates a key K of an encryption function E of a block cipher, in accordance with an initial parameter N. A hash calculation unit (22) calculates a hash value msk with an internal parameter ctr as an input. An encryption unit (23) generates a ciphertext c of the message m by using the encryption function E, with a key K generated by the key generation unit (21), a hash value msk calculated by the hash calculation unit (22), and a message m as inputs.