Distributed Real-Time Security Using Dynamic Asymmetric Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Embedded systems face challenges in ensuring the authenticity and integrity of real-time data while maintaining minimal processing delays and limited resource usage, especially with untrustworthy maintenance personnel and insecure communication channels.
Innovation Solution
A distributed real-time computer architecture using asymmetric cryptosystems with long key pairs during startup and short, frequently changing key pairs during real-time operation, ensuring authenticity and integrity without compromising processing speed, and optionally providing confidentiality by encrypting data with short keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric encryption with long key pairs is used to ensure security, then data authenticity and integrity are improved, but computational overhead and processing time increase
Solution Approach 1:
The patent divides the encryption process into two distinct phases: a startup phase using long key pairs for key establishment and authentication, and a real-time operation phase using short key pairs for rapid data processing. This segmentation allows each phase to use the appropriate key length for its specific requirements, optimizing both security and performance.
Solution Approach 2:
The system dynamically switches between different key pair configurations based on the operational phase. During startup, long key pairs provide strong security for key establishment, while during real-time operation, short key pairs enable fast processing. This dynamic adaptation resolves the contradiction between security requirements and processing speed.
2Reliability
If frequently changing key pairs are used to prevent cracking, then security against attackers is improved, but computational effort and processing time increase
Solution Approach 1:
The patent segments the operational phases and applies different key management strategies to each. The startup phase establishes long-term key pairs that remain stable, while the real-time phase uses short-lived key pairs that are frequently changed. This segmentation allows frequent key changes only when necessary, reducing overall computational burden.
Solution Approach 2:
The system changes the parameter of key pair length based on the operational context. Long key pairs are used only during startup for secure key establishment, while short key pairs are used during real-time operation for rapid processing with frequent rotation. This parameter adaptation balances security requirements with computational constraints.
3Reliability
If encryption is applied to all real-time data, then confidentiality is improved, but processing delay and resource consumption increase
Solution Approach 1:
The patent implements dynamic encryption where confidentiality is applied selectively based on data sensitivity and operational context. During real-time operation, encryption is used only when confidentiality is required, with short key pairs enabling rapid processing. This dynamic approach ensures confidentiality without unnecessarily encrypting all data, thus minimizing processing delays.
Solution Approach 2:
The system changes the encryption parameter (key length) based on the confidentiality requirements. Short key pairs are used for real-time confidential data processing to minimize delay, while long key pairs are reserved for startup phase key establishment. This parameter adaptation allows confidentiality to be maintained while reducing processing overhead.
Data Source
Figure 1~2
Figure 3~4
AI summary
The method involves transmitting periodically real time messages with real time data by multiple computers (111,112,113) to the other computers. A computer takes over a cable role of a safety server. Another computer observes the cable role of a certification authority (115). All computers have access to a common sparse time base. The computer has a secret asymmetrical key for the production of a signature. An associated public key is provided for checking the authenticity and integrity of the marked data structure. Independent claims are also included for the following: (1) a distributed real time system, which has multiple computers (2) a multi-processor system on chip with a distributed real time system.