Directional Nonces for Encrypted Node-to-Node Transmissions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network protocols face synchronization issues and potential delay attacks when using the same encryption key or nonce for all transmissions between nodes, leading to inefficient resynchronization and increased power consumption.
Innovation Solution
Implementing separate nonce values for unidirectional communications between nodes, with each node maintaining two sets of nonce values for transmitting and receiving packets, and periodically resetting security parameters to mitigate synchronization loss and delay attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the same SPAN (nonce value) is used for all communications between two nodes, then encryption security is improved, but synchronization loss occurs when packets are lost or delayed
Solution Approach 1:
The patent divides the single shared SPAN into two separate unidirectional SPANs: one for packets transmitted from Node A to Node B, and another for packets transmitted from Node B to Node A. Each SPAN is independently updated based on successful transmissions in its specific direction, preventing synchronization loss even when packets are lost or delayed in one direction.
2Reliability
If a single SPAN is updated on successful transmission, then encryption key diversity is improved, but resynchronization frequency increases due to packet loss
Solution Approach 1:
By segmenting the SPAN into bidirectional components, the patent ensures that updates in one direction do not affect the other. Each node maintains its own transmit SPAN and receive SPAN independently, so packet loss in one direction only affects the SPAN for that specific direction, minimizing the need for full resynchronization.
3Stability of the object's composition
If unidirectional nonce values are implemented, then synchronization stability is improved, but device complexity increases due to maintaining two sets of nonce values
Solution Approach 1:
The patent introduces asymmetry by treating transmit and receive operations differently, with each having its own SPAN. This asymmetric approach simplifies the synchronization logic by eliminating the need for complex coordination between bidirectional updates, as each SPAN is independently managed based on its own transmission success.
Data Source
AI summary
Systems and methods for improving encrypted transmissions between nodes in a network are disclosed. In one embodiment, two sets of nonce values are used to monitor communications between each pair of network devices, wherein one set of nonce values is used for packets transmitted from a first node to a second node, and the second set of nonce values is used for packets transmitted from the second node to the first node. These nonce values are used to encrypt packets transmitted between the two nodes. In this way, the probability of loss of synchronization may be reduced, especially in configurations where there is an intermediate node between the first node and the second node. In another embodiment, the possibility of a delay attack is minimized by the intentional resetting of security parameters.