Embedded Network Adapter With Dynamic Message Reconfiguration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Embedded systems face vulnerabilities due to the lack of IT authentication and encryption security features in communication protocols, making them susceptible to cyber-attacks that exploit message formats and payloads.
Innovation Solution
An adapter with a processor that dynamically reconfigures message formats, such as arbitration schemes, payload layouts, and encoding, to secure communication between embedded devices and networks, using a tapped power and ground line and data lines, and implementing a DREN algorithm to thwart cyber-attacks in real-time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If typical IT authentication and encryption security features are implemented in communication protocols, then security against cyber-attacks is improved, but processing cost and timing requirements cannot be met
Solution Approach 1:
The system segments security functions into two layers: (1) lightweight protocol-level authentication using authentication codes generated from secret keys and message data, and (2) optional encryption/decryption operations performed separately. This segmentation allows authentication to occur at protocol speed while encryption can be applied to specific data portions, meeting both security and timing requirements.
Solution Approach 2:
An authentication code (mediator) is introduced as an intermediate security mechanism that provides verification without requiring full encryption/decryption processing. The authentication code is generated by combining secret key material with message data through hashing or encoding, providing rapid verification that prevents spoofing attacks while maintaining protocol timing constraints.
2Productivity
If message formats and arbitration identifiers remain static and predictable, then communication efficiency is maintained, but vulnerability to reverse engineering and spoofing attacks increases
Solution Approach 1:
The system dynamically changes message formats by selectively encrypting portions of the data payload and dynamically modifying arbitration identifiers based on secret key material and message content. This dynamic transformation ensures that even if attackers monitor traffic, they cannot predict or reverse-engineer message structures or identifiers, while encrypted portions are only applied where needed to maintain communication efficiency.
Solution Approach 2:
The system changes cryptographic parameters (encryption keys, authentication codes, encrypted data portions) dynamically based on message content and sequence. This parameter changes approach allows the protocol to maintain efficient communication with static structure where possible while introducing variability in critical security parameters to prevent reverse engineering and spoofing attacks.
3Reliability
If authentication codes and encryption are applied to all message portions, then security is improved, but processing overhead and timing requirements are violated
Solution Approach 1:
The system applies partial encryption and authentication to only the portions of messages that require security protection, rather than encrypting entire messages. Critical fields such as arbitration identifiers and specific payload portions are protected with authentication codes, while non-critical data may be transmitted in plaintext or with lighter protection, reducing processing overhead and meeting timing requirements while maintaining security for essential elements.
Data Source
AI summary
An adapter increases the resiliency and security of protocols used for communication between embedded systems on a network. The adapter actively protects against reverse engineering and exploitation. The adapter allows embedded systems to actively thwarting cyber-attacks in real-time while allowing the embedded system to continue operating in mission ready status.