Secure Test Data Exchange via Encrypted Caching

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing test equipment systems face challenges in secure data communication between a computer test tool and a cloud-based server, particularly due to the risk of fake or counterfeit data transmission by intruders posing as the test tool or server, and the need for network access during critical data exchange.

Innovation Solution

A system that uses encryption with private and public keys to secure data communication between a computer test tool, a communication device, and a cloud-based server, allowing the test tool to cache and transmit encrypted data via Bluetooth, WiFi, or NFC, with the server decrypting using the public key and the test tool decrypting using its private key, and implementing mechanisms for data expiration and deletion.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a mobile device is coupled to the computer test tool to transmit data to the server, then network access is provided when the test tool lacks direct connection, but the system becomes vulnerable to counterfeit data transmission by intruders

Engineering Contradiction:
Improvenetwork access capabilityVSAvoiddata authentication security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The mobile device serves as an intermediary between the computer test tool and the server, enabling indirect network access when the test tool lacks direct connection. This intermediary approach allows the system to maintain adaptability while implementing security measures at multiple points in the communication chain.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

Encryption is performed in advance on the test data before transmission through the mobile device to the server. This preliminary security action ensures that even if the communication channel is compromised, the data remains protected, thus maintaining reliability while enabling versatile network access.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If encryption is implemented to prevent counterfeit data transmission, then data security is improved, but system complexity increases due to key management requirements

Engineering Contradiction:
Improvedata transmission securityVSAvoidencryption key management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The encryption system is segmented into distinct components: the computer test tool generates and manages its own private/public key pair, the mobile device handles transmission without requiring key management, and the server validates signatures using the test tool's public key. This segmentation distributes complexity across multiple devices, reducing the burden on any single component.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The computer test tool autonomously generates its own cryptographic key pair and uses its private key to sign data, eliminating the need for external key distribution or management infrastructure. This self-service approach improves security while managing complexity through automation.

Inventive Principle:
Principle #25Self-service

3Loss of time

If the test tool caches data locally before transmission, then data can be transmitted when network access becomes available, but data storage requirements and potential security risks increase

Engineering Contradiction:
Improvedata transmission delayVSAvoiddata caching and management
Core Design Contradiction:
Loss of timeVSDevice complexity

Solution Approach 1:

The test tool caches test data locally in advance, preparing it for future transmission when network access becomes available. This preliminary action reduces transmission delays by ensuring data is ready to send immediately when connectivity is established, addressing the time loss issue.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

Data is encrypted before caching it locally, preventing potential security risks associated with storing sensitive information. This preliminary protective action mitigates the security risks that arise from local data storage while maintaining the ability to cache and transmit data when needed.

Inventive Principle:
Principle #9Preliminary anti-action

Data Source

PatentEP3182324B1System and method for secure communications between a computer test tool and a cloud-based server
Publication Date: 2019.02.20 FLUKE CORP
  • EP3182324B1 patent drawingFigure 1
  • EP3182324B1 patent drawingFigure 2
  • EP3182324B1 patent drawingFigure 3

AI summary

A system for providing data communication is provided. The system includes at least one computer test tool configured to perform one or more diagnostic tests on a computer network. The system further includes at least one communication device configured to couple to the at least one computer test tool to receive and cache test data from the at least one computer test tool and to wirelessly couple to a communication network. In addition, the system includes a cloud-based server configured to couple to the communication network so as to receive test data transmitted from the at least one communication device wherein the test data is encrypted in the at least one computer test tool and decrypted in the cloud-based server.