Context-Based Cryptography Selection for Energy-Efficient Wireless Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication networks face challenges in selecting appropriate Post Quantum Cryptography (PQC) algorithms that balance security levels, network criticality, and energy efficiency, leading to non-optimal resource consumption and energy wastage.
Innovation Solution
A context-based cryptography selection method and system that analyzes network data to identify the most suitable PQC algorithm based on parameters such as network security level, criticality, and energy efficiency, using a look-up table or supervised learning, and generates a cryptography policy for optimal energy-efficient operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If PQC algorithms with enhanced cryptographic operations are implemented to achieve higher security levels, then security strength is improved, but energy consumption and computational resource requirements increase
Solution Approach 1:
The patent implements dynamic selection of PQC algorithms based on real-time network conditions, security requirements, and energy availability. The system adapts the cryptographic algorithm choice rather than using a fixed high-security algorithm, allowing optimization between security strength and energy consumption based on current operational context.
Solution Approach 2:
The system changes parameters such as algorithm type, key size, and cryptographic operation intensity based on security level requirements and energy constraints. By adjusting these parameters dynamically, the system achieves appropriate security protection without consistently using maximum-security configurations that would consume excessive energy.
2Reliability
If complex PQC algorithms are used to meet Zero Trust security requirements, then security protection is improved, but device complexity and computational overhead increase
Solution Approach 1:
The patent segments the network into different contexts (e.g., network slicing, service types, device categories) and applies appropriate PQC algorithms to each segment based on its specific security needs. This avoids applying complex cryptographic operations uniformly across all network elements, reducing overall computational overhead while maintaining necessary security protection.
Solution Approach 2:
Different cryptographic algorithm configurations are applied to different network elements, interfaces, or data streams based on their local security requirements. Critical interfaces receive stronger cryptographic protection while less sensitive communications use lighter algorithms, optimizing the balance between security protection and computational complexity.
3Productivity
If automated context-based cryptography selection is implemented, then energy efficiency and performance are improved, but system complexity increases
Solution Approach 1:
The system implements self-service automation where the cryptography selection mechanism automatically monitors network conditions, security requirements, and energy status to make algorithm selection decisions without manual intervention. This automation improves energy efficiency and performance by making optimal selections in real-time, though it does increase system complexity through the added automation infrastructure.
Data Source
AI summary
A system and method of selecting a cryptography algorithm within a network. The method can include receiving network data from a one or more network interfaces or network elements; analyzing the network data to identify a cryptography algorithm from a plurality of cryptography algorithms; and identifying the cryptography algorithm from the plurality of cryptography algorithms based on at least one of the following parameters: network security level, network criticality, or energy efficiency. In addition, the step of analyzing the network data to identify the cryptography algorithm may further include receiving a plurality of identifiers associated with the network data, wherein the plurality of identifiers are each further associated with a degree of importance in connection with the network security level parameter.