Dynamic Security Algorithm Selection for Communication Nodes

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing communication systems face challenges in dynamically adjusting security algorithms to match the evolving safety situation of nodes, particularly in scenarios where the destination and usage of nodes are unknown or change over time, and where the security level of interconnected nodes can impact each other.

Innovation Solution

A method that estimates the safety degree of nodes based on location, past security attacks, and traffic characteristics to select and apply appropriate security algorithms, ensuring higher security when needed and conserving resources when risks are low, using modules for estimation, selection, and activation of authentication, ciphering, and integrity algorithms.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If high security level algorithms are implemented in all nodes, then security protection is improved, but processing complexity and power consumption increase

Engineering Contradiction:
Improvesecurity protectionVSAvoidprocessing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements dynamic security algorithm selection where nodes continuously estimate their safety degree based on location, attack history, and network conditions. The security level is adjusted dynamically rather than being fixed, allowing nodes to switch between low and high security algorithms based on current safety assessments. This resolves the contradiction by making security adaptation dynamic rather than static.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent applies different security levels to different nodes based on their individual safety degrees. Instead of uniform high security across all nodes, each node receives customized security treatment according to its specific risk profile. Nodes in safe locations with no attack history use low security algorithms, while nodes under threat use high security algorithms, optimizing the balance between security and resource consumption.

Inventive Principle:
Principle #3Local quality

2Reliability

If high security level algorithms are implemented in all nodes, then security protection is improved, but power consumption increases

Engineering Contradiction:
Improvesecurity protectionVSAvoidpower consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The security system dynamically adjusts power consumption by selecting algorithm complexity based on real-time safety assessments. When safety degree is high, low-power algorithms are used; when safety degree is low, higher-power algorithms are activated. This dynamic power management resolves the contradiction between security protection and energy consumption.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

Different power consumption levels are applied to different nodes based on their individual security needs. Nodes with high safety degrees consume minimal power using simple algorithms, while nodes under threat consume more power for enhanced security processing. This localized approach optimizes overall system power consumption while maintaining necessary security protection.

Inventive Principle:
Principle #3Local quality

3Reliability

If security algorithms are selected based on known destination and usage, then security appropriateness is improved, but adaptability to changing conditions deteriorates

Engineering Contradiction:
Improvesecurity appropriatenessVSAvoidadaptability to changing conditions
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements continuous feedback mechanisms where nodes monitor their safety degree based on location changes, attack history, and network conditions. The security algorithm selection is continuously adjusted based on this feedback, allowing the system to adapt to changing conditions while maintaining appropriate security levels. This feedback loop resolves the contradiction between security appropriateness and adaptability.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system transitions from static security configuration based on known destination to dynamic security adaptation based on real-time conditions. Nodes continuously reassess their safety degree and adjust their security algorithms accordingly, enabling adaptation to changing usage patterns, locations, and threat levels while maintaining security appropriateness.

Inventive Principle:
Principle #15Dynamics

4Productivity

If low security level algorithms are used to avoid complex processing, then processing efficiency is improved, but security protection deteriorates

Engineering Contradiction:
Improveprocessing efficiencyVSAvoidsecurity protection
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent applies low security algorithms locally to nodes with high safety degrees (nodes in safe locations with no attack history), while applying high security algorithms to nodes under threat. This localized differentiation resolves the contradiction by matching algorithm complexity to actual security needs, optimizing both processing efficiency and security protection for each node.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system dynamically selects between low and high security algorithms based on real-time safety assessments. When safety degree is high, efficient low-security algorithms are used; when safety degree is low, robust high-security algorithms are activated. This dynamic selection resolves the contradiction between processing efficiency and security protection.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP1848174B1Security control in a communication system
Publication Date: 2016.11.02 BLACKBERRY LTD
  • EP1848174B1 patent drawingFigure 1~2
  • EP1848174B1 patent drawingFigure 3

AI summary

The invention relates to a method of controlling security in a communication system comprising at least one node (1,1',A-D) capable of routing traffic according to a plurality of security algorithms (9,9') with respective security levels. The method comprises an estimation of at least one safety degree relating to said node, a selection of at least one security algorithm of said plurality, depending on said estimated safety degree, and an activation of said at least one security algorithm.