Connected-System Communication Authentication with Post-Quantum Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current aviation communication systems lack entity authentication, making them susceptible to interception and tampering, and are vulnerable to attacks from quantum computers that can compromise the security of flight data and control systems.
Innovation Solution
Implementing a cloud-based quantum service computing entity and a quantum edge computing entity, such as an avionics IoT gateway, to generate and manage post quantum cryptographic keys, providing secure communication channels using post quantum cryptography.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Power
If quantum computers are deployed, then computational power increases, but security of flight data and control systems deteriorates
Solution Approach 1:
The patent applies preliminary anti-action by implementing post-quantum cryptography algorithms that are specifically designed to resist quantum computing attacks before quantum computers become a practical threat. The system pre-provisions quantum-resistant cryptographic primitives and key management mechanisms in advance, ensuring that flight data security is fortified against future quantum capabilities rather than reacting after compromise occurs.
Solution Approach 2:
The patent implements parameter changes by transitioning from classical cryptographic parameters to post-quantum cryptographic parameters. This includes changing key lengths, algorithm structures, and security assumptions to accommodate the enhanced computational power of quantum computers. The system dynamically adjusts cryptographic parameters to maintain security levels equivalent to or higher than current standards despite quantum threats.
2Device complexity
If entity authentication is not implemented, then system complexity decreases, but vulnerability to interception and tampering increases
Solution Approach 1:
The patent introduces an intermediary authentication mechanism that mediates between connected systems without requiring complex mutual authentication protocols. The system uses a trusted third-party authentication service that verifies entity identities and establishes secure communication channels, simplifying the overall system architecture while providing robust protection against interception and tampering through centralized credential verification.
Data Source
AI summary
Embodiments of the present disclosure provide techniques for providing secure communication for connected systems. The techniques may include receiving a communication session indication associated with a first connected system; authenticating the first connected system based on IAM policy; encrypting a message to generate an encrypted message based on a post quantum cryptography public key associated with the first connected system; and causing transmitting of the encrypted message to a second connected system.


