Concatenating Security Association Payloads to Reduce Encryption Overhead
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption methods in broadband wireless networks incur significant overhead in network bandwidth utilization, processing time, and energy consumption due to independent encryption of multiple data payloads from multiple connections, along with the additional overhead of generating and adding header fields.
Innovation Solution
A method and system that detect security associations for data payloads from multiple connections, concatenate them, and encrypt the concatenated data payloads for each security association, reducing processing overhead and resource utilization by minimizing the number of encryption operations and header generations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple data payloads from multiple connections are encrypted independently, then security is maintained for each connection, but network bandwidth utilization increases and processing time increases
Solution Approach 1:
The patent merges multiple data payloads from different connections that share the same security association into a single concatenated payload for encryption. This combining approach reduces the number of separate encryption operations needed, thereby decreasing processing overhead and improving network bandwidth utilization while maintaining security through the preserved security association structure.
2Reliability
If multiple data payloads from multiple connections are encrypted independently, then security is maintained for each connection, but processing time increases
Solution Approach 1:
The patent combines multiple data payloads into a single concatenated payload that is then encrypted in one operation rather than multiple separate operations. This merging reduces the total processing time by eliminating redundant encryption overhead while maintaining security through the preserved security association structure.
Solution Approach 2:
The patent performs preliminary grouping and concatenation of data payloads by security association before encryption. This preliminary organization allows the encryption process to operate on consolidated data blocks, reducing the overall processing time by minimizing the number of separate encryption operations required.
3Reliability
If multiple data payloads from multiple connections are encrypted independently, then security is maintained for each connection, but energy consumption increases
Solution Approach 1:
The patent merges multiple data payloads into consolidated blocks for encryption, reducing the total number of encryption operations. This merging significantly decreases energy consumption at both subscriber stations and base stations while maintaining security through the preserved security association structure.
4Ease of operation
If header fields are generated and added to each data payload from each connection, then connection identification is enabled, but overhead increases
Solution Approach 1:
The patent merges multiple data payloads into a single concatenated payload and generates a single header field for the combined data, rather than generating separate header fields for each individual payload. This approach significantly reduces overhead while maintaining connection identification capabilities through the security association structure.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method and system for encryption is provided. The method includes detecting one or more security associations corresponding to data payloads in response to receipt of the data payloads from multiple source connections. Each data payload includes one or more data packets from each source connection. The method also includes concatenating the data payloads corresponding to each security association. Further, the method includes encrypting the concatenated data payloads for each security association. The system includes a determination module that detects one or more security associations corresponding to data payloads in response to receipt of the data payloads from multiple source connections and concatenates the data payloads corresponding to each security association. The system also includes an encryption module that encrypts the concatenated data payloads for each security association.