Ciphertext Fingerprinting for Integrity Checks in Constrained Wireless
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Short-range wireless communication channels face challenges in message integrity validation and device authentication due to limited data packet sizes, which restrict the choice of encryption algorithms, making it difficult to effectively authenticate transmitters and validate message integrity.
Innovation Solution
A method and system utilizing a secure pseudo-random permutation (PRP) property of encryption algorithms, specifically a length-doubler construction on tweakable block ciphers, to generate cryptographic fingerprints from ciphertext messages, enabling efficient integrity validation and device authentication within constrained packet sizes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption algorithms are used for message integrity validation, then security is improved, but device complexity and computational overhead increase beyond what constrained packet sizes can support
Solution Approach 1:
The patent extracts only the essential integrity validation functionality from traditional encryption algorithms by using cryptographic fingerprints (hash values) of the encrypted message. Instead of implementing full decryption and verification protocols, the system extracts and compares compact fingerprint representations, reducing computational complexity while maintaining integrity validation capability
Solution Approach 2:
The patent changes the parameter of encryption algorithm selection by moving from traditional symmetric encryption algorithms (AES, DES) to lightweight cryptographic hash functions suitable for constrained environments. This parameter change enables integrity validation with reduced computational overhead and smaller packet sizes, making the system suitable for short-range wireless communication constraints
2Reliability
If data packet size is increased to accommodate validation data, then message integrity validation is improved, but communication efficiency deteriorates due to larger transmission overhead
Solution Approach 1:
The patent applies partial action by implementing only the essential fingerprint comparison mechanism for integrity validation, rather than full message verification. This partial approach provides sufficient integrity protection for constrained communication while minimizing the amount of validation data that needs to be transmitted, thus preserving communication efficiency
Solution Approach 2:
The patent uses cryptographic fingerprints as compact copies or representations of the encrypted message content. Instead of transmitting or processing the entire message for validation, the system transmits and compares small fingerprint copies (hash values), enabling integrity validation with minimal data overhead and maintaining high communication efficiency
Data Source
AI summary
An example method includes receiving metadata associated with a plurality of computing devices. Each metadata includes an indication of a cryptographic fingerprint of secret data known to an associated computing device. The method includes receiving, over a short-range wireless communication mode, a ciphertext message broadcast by another computing device. The message is generated by an encryption algorithm that has the secure pseudo-random permutation (PRP) property and that conforms the message to a constrained packet size associated with the communication mode. A cryptographic fingerprint is derivable from the message. The method includes generating the cryptographic fingerprint. The method includes comparing the generated fingerprint with fingerprints associated with previously received metadata. The method includes, upon a determination that the generated fingerprint matches a fingerprint associated with one of the previously received metadata, establishing an integrity of the message. Establishing of the integrity is based on the PRP property of the encryption algorithm.