Encryption Protocol Variant Selection for Attack Resistance

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current encryption methods are vulnerable to hidden channel and fault injection attacks, which compromise data security during transmission, and existing solutions are either expensive or resource-intensive.

Innovation Solution

The method involves dynamically selecting a variant of the encryption protocol for each message transmission, using a variation index to ensure each encryption operation differs, thereby rendering attacks ineffective without the need for extensive device modifications or frequent key changes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If hardware protection measures are implemented to prevent attacks, then security against covert channel and fault injection attacks is improved, but device cost and complexity increase significantly

Engineering Contradiction:
Improvesecurity against attacksVSAvoidhardware protection measures
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent changes the parameter of encryption protocol selection by introducing randomness in choosing between symmetric and asymmetric encryption modes. This dynamic parameter change prevents attackers from predicting or analyzing encryption behavior through covert channels, achieving security without hardware modifications

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The encryption system dynamically switches between different encryption protocols (symmetric/asymmetric) based on random selection. This dynamic behavior makes the system adaptive and unpredictable, countering attacks that rely on analyzing static encryption patterns without requiring complex hardware protection

Inventive Principle:
Principle #15Dynamics

2Reliability

If key change is performed each time data is exchanged, then security against attacks is improved, but resource consumption and implementation complexity increase

Engineering Contradiction:
Improvesecurity against attacksVSAvoidkey management operations
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Instead of completely changing encryption keys for each exchange, the patent applies partial action by randomly selecting between two encryption modes (symmetric/asymmetric) while reusing the same keys. This partial change in encryption approach provides security against analysis attacks without requiring full key regeneration, reducing computational overhead

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The system changes the encryption mode parameter (symmetric vs asymmetric) rather than changing the actual cryptographic keys. This parameter substitution provides variability in encryption behavior to counter attacks while maintaining key reuse, significantly reducing the resource burden of key management

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentEP3526946B1Encryption method, decryption method, device and corresponding computer program
Publication Date: 2024.02.07 BANKS & ACQUIRERS INT HLDG SAS
  • EP3526946B1 patent drawingFigure 1
  • EP3526946B1 patent drawingFigure 2~3
  • EP3526946B1 patent drawing

AI summary

The invention relates to a method for encrypting a message, implemented by an electronic encryption device. Such a method comprises: - a step (10) of obtaining a current message (MaChf); - a step (20) of obtaining a current encryption key (CChf); - a step (30) of determining, from among a plurality of variants (LstVarA) of a base encryption protocol, a current variant (VarCr) of said encryption protocol; - a step (40) of encrypting, using said current variant (VarCr) and said encryption key (CChf), said message to be encrypted (MaChf), producing an encrypted message (MChf), and; - a step (50) of transmitting said encrypted message (MChf).