External Security Device for Legacy Embedded Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Older Internet-enabled embedded systems have limited resources, making it costly and impractical to upgrade their firmware with advanced security features like encryption, as they lack the processing power to run complex encryption software.
Innovation Solution
A low-cost, self-contained device with Ethernet connectivity that determines whether data needs to be encrypted or decrypted, using public and private keys, and cipher suites like AES, to establish secure communication channels between legacy devices and remote hosts, enabling secure data transmission over networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware is upgraded with encryption software to enhance security, then security capability is improved, but the embedded system cannot support it due to insufficient processing power and resources
Solution Approach 1:
The patent introduces an external security device that acts as an intermediary between the legacy embedded system and the network. This external device handles all encryption and decryption operations, allowing the embedded system to communicate securely without requiring any upgrades to its own processing capabilities. The security functions are performed by the intermediary device rather than the resource-constrained embedded system.
2Reliability
If encryption software is installed on the embedded system, then data security is improved, but the cost of replacement increases due to insufficient resources
Solution Approach 1:
The patent segments the security function from the embedded system itself, placing it in a separate external device. This allows the embedded system to remain unchanged and inexpensive, while security is provided by a dedicated external component. The segmentation enables independent optimization of each component - the embedded system stays simple and low-cost, while the external security device provides robust encryption capabilities.
3Ease of manufacture
If the embedded system is left unchanged to maintain low cost, then manufacturing cost is reduced, but security concerns arise from lack of encryption capability
Solution Approach 1:
The external security device serves as a mediator that protects the embedded system from security vulnerabilities without requiring changes to the embedded system itself. This intermediary handles all security-sensitive operations, allowing the embedded system to remain simple and low-cost while still providing secure communication through the protective layer it introduces.
4Reliability
If processing power is increased to run encryption software, then security capability is improved, but the embedded system becomes more complex and costly
Solution Approach 1:
The patent uses an external security device as an intermediary to perform all processing-intensive encryption operations. This allows the embedded system to maintain its original low processing power while still achieving secure communication. The intermediary device bears the processing burden, enabling the embedded system to remain simple and energy-efficient.
Data Source
AI summary
A method and device for securing data transmission via an embedded system that is operationally coupled to a local device and a remote computing system using a network is provided. The method includes, determining if data received from the remote computing system is secured, handshaking with the remote computing system if the data received is from a new connection; decrypting the secured data; and transmitting the decrypted data to the local device. The method also includes, determining if the data received from the local device is from a new connection, handshaking with the remote computing system if the data received is from a new connection; encrypting the data; and transmitting the encrypted data to the remote computing system. A receiving module determines whether input data needs to be encrypted or decrypted; a processing module for encrypting and/or decrypting input data; and an output module for transmitting encrypted and/decrypted data.