Fusion Covert Channel for IoT Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Internet of Things (IoT) devices face challenges in secure and effective data transmission due to permeable boundaries and low network traffic, making it difficult to construct covert channels effectively.
Innovation Solution
A fusion covert channel is constructed by converging time and storage covert channels, where data packets from different source addresses are rearranged and secret information is embedded in TCP sequence number fields, allowing for flexible capacity adjustment based on network quality and terminal connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If covert channels are constructed in IoT devices with low network traffic, then data transmission security is improved, but the capacity of covert channel is insufficient
Solution Approach 1:
The patent combines time covert channel and storage covert channel into a fusion covert channel. The time covert channel utilizes packet transmission timing information while the storage covert channel utilizes TCP sequence number fields, creating a hybrid system that achieves both high security and high capacity by merging two different covert channel mechanisms.
Solution Approach 2:
The patent introduces multiple dimensions for hiding secret information: time dimension (packet transmission timing), storage dimension (TCP sequence number fields), and permutation dimension (rearranging data packets from different source addresses). By adding these additional dimensions, the system overcomes the capacity limitation of low-traffic IoT networks.
2Quantity of substance
If data packets are rearranged to carry secret information, then covert channel capacity is improved, but detection difficulty increases
Solution Approach 1:
The patent uses legitimate TCP protocol fields (sequence number fields) and normal packet timing behavior as intermediaries to carry secret information. By embedding covert data in standard protocol elements that are expected to vary naturally, the system increases capacity while maintaining covertness and evading detection.
Solution Approach 2:
The patent changes multiple parameters simultaneously: packet permutation order, TCP sequence number values, and transmission timing intervals. By varying these parameters in coordinated ways, the system encodes secret information in patterns that appear as normal protocol variations, making detection difficult while maximizing capacity.
3Quantity of substance
If multiple covert channel methods are combined, then capacity and covertness are improved, but system complexity increases
Solution Approach 1:
The patent designs the fusion covert channel to perform multiple functions using a unified framework: it can encode secret information in packet timing, TCP sequence numbers, and permutation patterns simultaneously. This multi-functional design achieves high capacity and covertness while avoiding the need for separate independent covert channel systems, thereby controlling complexity.
Data Source
AI summary
The present disclosure relates to a method and system for constructing a fusion covert channel. A time covert channel is constructed by rearranging data packets of different terminals in the Internet of Things in a manner of carrying secret information, a storage covert channel is constructed by replacing a TCP sequence number field of a data packet with secret information, and a fusion covert channel is constructed by fusing the time covert channel and the storage covert channel. In this way, advantages of the two channels can be complemented, so that covertness of the fusion covert channel is improved and a capacity of the covert channel is increased.