Communication Control Device Encryption Range Adaptation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication technologies struggle to suitably encrypt information based on security levels, leading to potential security risks despite variations in encryption levels.
Innovation Solution
A communication control apparatus and method that acquire communication path information to determine an appropriate encryption range for each target flow, allowing for dynamic encryption and decryption based on the assessed security level.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the encryption level is varied based on a predetermined degree of reliability, then the encryption can be adapted to different security requirements, but the information may not be suitably encrypted according to the actual security level
Solution Approach 1:
The patent implements a feedback mechanism where the communication control apparatus acquires communication path information (including reliability assessments) and uses this feedback to dynamically adjust the encryption range. The system continuously monitors communication quality and modifies encryption parameters accordingly, ensuring that encryption suitability matches actual security requirements rather than relying on predetermined levels.
Solution Approach 2:
The patent introduces dynamic encryption range adjustment based on real-time communication path conditions. Instead of using static encryption levels, the system dynamically modifies the encryption scope (e.g., which packet fields are encrypted) according to the acquired communication path information, allowing the encryption mechanism to adapt flexibly to changing security requirements.
2Adaptability or versatility
If the encryption level is changed based on quality information, then the encryption can be adjusted to current communication state, but the information may still not be suitably encrypted according to the security level
Solution Approach 1:
The patent segments the encryption process into a control plane and a data plane. The communication control apparatus (control plane) acquires communication path information and determines the appropriate encryption range, while the communication apparatus (data plane) executes the actual encryption. This segmentation allows for more precise and suitable encryption by separating the decision-making process from the execution process.
Solution Approach 2:
The communication control apparatus acts as an intermediary between the communication apparatus and the encryption mechanism. It acquires communication path information, determines the suitable encryption range, and provides instructions to the communication apparatus. This intermediary role enables more accurate encryption suitability matching by introducing an additional layer of control and decision-making.
3Reliability
If a broader encryption range is applied to enhance security, then the security level is improved, but the throughput is reduced
Solution Approach 1:
The patent applies local quality by encrypting only the necessary portions of communication data based on the acquired communication path information. Instead of uniformly encrypting the entire data stream, the system identifies specific encryption ranges (e.g., particular packet fields or data segments) that require protection, thereby enhancing security where needed while minimizing the impact on overall throughput.
Solution Approach 2:
The patent dynamically changes encryption parameters (such as the encryption range scope) based on communication path conditions. When security risks are identified through communication path information acquisition, the system adjusts encryption parameters to apply stronger encryption only where necessary, rather than maintaining a constant broad encryption scope that would unnecessarily reduce throughput.
Data Source
AI summary
In order to make it possible to suitably instruct encryption or decryption of information according to the security level, a communication control apparatus (1) includes: an acquisition means (11) for acquiring communication path information; and an instruction means (12) for instructing at least one of encryption and decryption of a target flow with use of an encryption range which is defined according to the acquired communication path information and which is of the target flow.