Exclusive Encryption System Unique Device Parameters

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Public encryption systems like DES and AES are vulnerable to covert attacks and do not address the issue of unique encryption algorithms, relying on large keys and block sizes for security, which can be compromised if one device is compromised, affecting others with similar parameters.

Innovation Solution

An exclusive encryption system employing a unique encryption algorithm for each implementation, using a combination of individual and group encryption operations such as mathematical offset, wide XOR function, short and long logical rotations, and address encryption, with each device having distinct parameters and keys, implemented in a field programmable gate array or ASIC, providing additional layers of security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If public encryption systems like DES and AES are used with large keys and block sizes, then security against brute force attacks is improved, but vulnerability to covert attacks and compromise propagation increases

Engineering Contradiction:

Improvesecurity against brute force attacksVSAvoidvulnerability to covert attacks and compromise propagation

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The encryption system is divided into multiple independent components including key generation module, encryption module, and decryption module. Each device has its own unique key pair generated locally, creating segmented security domains where compromise of one device does not affect others. The encryption process itself is segmented into multiple rounds with different operations (SubBytes, ShiftRows, MixColumns, AddRoundKey) to increase complexity for covert attackers.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Each encryption device is configured with locally unique parameters including device-specific key pairs, unique identifiers, and customized encryption parameters. This local quality ensures that even though the same encryption algorithm is used across multiple devices, each device's security is independent and cannot be compromised by attacks on other devices.

Inventive Principle:

Principle #3Local quality

2Ease of manufacture

If the same encryption algorithm and parameters are used across multiple devices, then ease of implementation and standardization is improved, but security is worsened due to compromise propagation

Engineering Contradiction:

Improveease of implementation and standardizationVSAvoidsecurity against compromise propagation

Core Design Contradiction:

Ease of manufactureVSReliability

Solution Approach 1:

Each device is manufactured with locally unique security parameters including device-specific key pairs, unique identifiers, and customized encryption parameters. The base encryption algorithm remains standardized for ease of implementation, but local quality variations in keys and parameters ensure that compromise of one device does not propagate to others.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

While the fundamental encryption algorithm structure remains the same across devices for standardization, critical parameters such as key pairs, initialization vectors, and round constants are changed for each device. This parameter variation maintains implementation simplicity while preventing compromise propagation.

Inventive Principle:

Principle #35Parameter changes

3Reliability

If unique encryption parameters are used for each device, then security against compromise propagation is improved, but device complexity and key management increases

Engineering Contradiction:

Improvesecurity against compromise propagationVSAvoiddevice complexity and key management

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Each encryption device generates its own unique key pair locally through a pseudo-random number generator seeded with device-specific identifiers. This self-service approach eliminates the need for centralized key distribution and reduces key management complexity. The device autonomously manages its own cryptographic parameters without requiring external intervention.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The encryption device is designed with universal components that can handle multiple cryptographic operations (encryption, decryption, key generation, authentication) using a unified architecture. This multi-functionality reduces overall device complexity despite the use of unique parameters, as the same hardware blocks are reused with different parameter sets.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS7742597B2Exclusive encryption system

Publication Date: 2010.06.22 MERCURY SISTEMS INC

AI summary

An encryption system includes a plurality of encryption operations including individual encryption operations and group encryption operations available for application in the encryption of data. The plurality of encryption operations are selected from the group consisting of functional variance, functional alignment, mathematical offset, wide XOR function, short logical rotation, long logical rotation, functional order, and address encryption. The system includes at least one round of encryption composed of a first encryption operation and a second encryption operation. The first encryption operation is selected from the plurality of encryption operations acting upon input data to generate a first encrypted data set. The second encryption operation is selected from the plurality of encryption operations acting upon the first encrypted data set to generate a second encrypted data set. The first encryption operation and the second encryption operation are different.