Data Transmission Protection Through Security Capability Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission methods face challenges in maintaining security and integrity due to desynchrony and incomplete security protection capabilities in network environments, leading to inefficiencies in encryption and integrity verification processes.
Innovation Solution
Network nodes synchronize their security protection capabilities by sharing supported algorithms and parameters, allowing for accurate selection and direct decryption/integrity verification, reducing redundant parameter transmission and computational load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network nodes perform encryption protection and integrity verification on transmitted data, then data security and integrity are improved, but the device complexity and computational load increase
Solution Approach 1:
The patent applies preliminary action by having network nodes pre-share and synchronize their security protection capabilities (encryption algorithms, integrity protection algorithms, security parameters) before actual data transmission occurs. This pre-synchronization ensures that when data needs to be encrypted and verified, both nodes already have the necessary security parameters ready, eliminating the need for complex real-time negotiation and reducing the overall complexity of the security verification process.
2Reliability
If network nodes transmit complete security parameters for decryption and integrity verification, then security protection completeness is improved, but the loss of information (redundant parameter transmission) increases
Solution Approach 1:
The patent applies the extraction principle by having network nodes extract and share only the essential security parameters (encryption algorithms, integrity protection algorithms, and necessary security keys) that are actually needed for decryption and verification. By carefully selecting and transmitting only these critical parameters rather than complete security configurations, the patent eliminates redundant information transmission while maintaining the completeness required for secure data protection.
3Reliability
If network nodes perform comprehensive integrity verification on all transmitted data, then data integrity is improved, but the productivity (computational efficiency) decreases
Solution Approach 1:
The patent applies partial action by implementing targeted integrity verification using efficiently selected integrity protection algorithms and parameters that are synchronized between network nodes. Rather than performing exhaustive verification on all possible data aspects, the system focuses verification efforts on critical data elements using optimized algorithms, achieving sufficient integrity protection while maintaining computational efficiency and avoiding unnecessary processing overhead.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This application discloses a data transmission protection method, a device, and a system, and relates to the field of communication technologies, to simplify a security verification and integrity verification process while ensuring security and integrity during data transmission. In solutions disclosed in this application, network nodes share security protection capabilities supported by the network nodes to each other, so that the security protection capabilities are synchronized between the network nodes. Based on this, when data or signaling is transmitted, a matching security parameter (for example, an encryption algorithm, an integrity protection algorithm, a security key calculation parameter, and a key calculation parameter) may be selected to perform security protection on the data, or a matching security parameter may be selected to perform decryption and integrity verification on the data. This not only avoids transmission of a redundant parameter, but also simplifies a decryption and integrity verification process, so that computing power for decryption and integrity verification is reduced.