Encrypted Packet Transmission with Truncated Key Information
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In ultra-narrow band wireless communication systems, ensuring data confidentiality between terminals and the access network is challenging due to limited packet information capacity, especially when varying encryption keys are used, as the access network may not receive all packets and lacks information on key modifications.
Innovation Solution
A method for transmitting encrypted packets using a symmetric key encryption protocol, where the encryption key is determined by a variable generation information item, decomposed into a slowly varying first portion and a rapidly varying second portion, with a truncated information representative of the second portion included in the packet, allowing the receiver to estimate the key without increasing the packet's information load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the encryption key is varied at each packet transmission to improve confidentiality, then the security is enhanced, but the access network cannot determine the current key because it may not receive all packets
Solution Approach 1:
The generation information is segmented into two portions: a first portion that is not included in the packet and a second portion that is included. This segmentation allows the packet to contain only the necessary key determination information (second portion) while the receiver can reconstruct the full generation information by combining it with the first portion, thus resolving the contradiction between varying keys for security and providing key determination information in limited-capacity packets.
Solution Approach 2:
The first portion of the generation information acts as an intermediary element that is excluded from the packet but essential for key determination. The receiver uses this first portion (which may be obtained through other means or previously stored) combined with the second portion from the packet to fully determine the encryption key, thus enabling key variation without increasing packet information capacity.
2Ease of operation
If information about the encryption key is included in the packet to enable key determination, then the access network can decrypt the data, but the packet information capacity is exceeded
Solution Approach 1:
The essential first portion of the generation information is extracted from the packet, leaving only the second portion (which varies more rapidly) to be included. This extraction allows the packet to remain within information capacity limits while still providing sufficient information for the receiver to determine the encryption key when combined with the extracted first portion.
Solution Approach 2:
The generation information is divided into two portions with different inclusion strategies: the first portion is excluded from the packet to save space, while the second portion is included. This segmentation enables key determination without exceeding packet information capacity constraints.
3Measurement precision
If the entire generation information is included in the packet to ensure accurate key determination, then the key can be correctly identified, but the packet size exceeds the limited information capacity of ultra-narrow band communication
Solution Approach 1:
The first portion of the generation information is extracted from the packet content, reducing the information quantity to fit within ultra-narrow band capacity limits. The receiver compensates for this extraction by using the first portion (obtained through other means) combined with the second portion from the packet to achieve accurate key determination.
Solution Approach 2:
Instead of including the complete generation information, only a partial portion (the second portion) is included in the packet. This partial action is sufficient for key determination when combined with the first portion, thus achieving the required accuracy without exceeding packet capacity constraints.
Data Source
AI summary
A method for transmitting, by a transmitter, a packet to a receiver of a communication system. The packet including data encrypted according to a symmetric key encryption protocol by determining the value of a generation information and determining an encryption key according to the value of the generation information. The data to be included in the encrypted packet to be transmitted is encrypted according to the encryption key. A truncated information is calculated based on the generation information. A verification code for the encrypted packet is calculated according to the encrypted data and the first portion of the generation information. The encrypted packet to be transmitted is formed according to the truncated information, the verification code and the encrypted data.