Block Cipher Key Length Segmentation for Real-Time IoT Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cryptography technologies face challenges in balancing security and real-time characteristics, particularly in IoT, unmanned mobile objects, and vehicle network environments with resource and computational limitations, where existing solutions either compromise security for real-time performance or vice versa.
Innovation Solution
A block cipher apparatus and method that selects keys of different lengths to encrypt plaintext blocks, generating ciphertext blocks and message authentication codes using a combination of hash algorithms, allowing for secure and efficient data transmission by adjusting key lengths based on network conditions and data stability, thereby ensuring both security and real-time performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric key cryptography is used to provide high security, then security is improved, but real-time transmission performance deteriorates due to long key lengths and computational complexity
Solution Approach 1:
The encryption process is segmented into multiple stages using different key lengths. The first encryption uses a longer key for high security, while subsequent encryptions use shorter keys for faster processing. This segmentation allows the system to balance security requirements with real-time performance constraints by applying computational intensity only where most needed.
Solution Approach 2:
The key length is made dynamic rather than static. The system adjusts key lengths based on the encryption stage and security requirements, using longer keys initially and progressively shorter keys in later stages. This dynamic approach allows optimization of both security and performance characteristics throughout the encryption process.
2Reliability
If symmetric key cryptography with long key lengths is used to ensure security against quantum computers, then security is improved, but encryption/decryption delay increases, lowering real-time characteristics
Solution Approach 1:
The encryption process is divided into multiple rounds with decreasing key lengths. The first round uses a 256-bit key for maximum security against quantum attacks, while subsequent rounds use progressively shorter keys (192-bit, 128-bit). This segmentation reduces total encryption time while maintaining security through the cumulative effect of multiple encryption layers.
Solution Approach 2:
The system applies encryption with progressively diminishing returns. After the first encryption with the longest key, subsequent encryptions with shorter keys provide diminishing security improvements but significantly reduced computational overhead. This partial action approach optimizes the security-performances tradeoff by not always using maximum key lengths.
3Productivity
If stream ciphers are used to provide real-time characteristics through simple XOR operations, then real-time performance is improved, but security deteriorates due to 50% plaintext prediction probability
Solution Approach 1:
The patent merges the advantages of stream ciphers (fast XOR operations for real-time performance) with the security of block ciphers (multiple encryption stages with different key lengths). The first stage uses a block cipher with a long key for security, while subsequent stages use faster operations, combining both security and real-time performance characteristics.
4Reliability
If TLS protocol is used for secure communication, then security is improved, but overhead and delay are generated, compromising real-time characteristics
Solution Approach 1:
The system performs preliminary encryption with the most secure parameters before data transmission begins. By applying the longest key encryption in advance and using shorter keys for subsequent processing, the system prepares the data with maximum security while reducing real-time overhead during actual transmission.
Data Source
AI summary
The present disclosure relates to a block cipher apparatus and method for real-time data transmission and the block cipher apparatus according to an exemplary embodiment of the present disclosure includes: a block encryption unit which selects a key in accordance with an order of keys having different lengths to encrypt each plaintext block and generate a ciphertext block; and a message authentication unit which generates a message authentication code using a key selected at the time of encrypting a current plaintext block which is encrypted in the block encryption unit and a previous message authentication code generated by a plaintext block before the current plaintext block.