Hash-Tree Signature Splitting for IoT Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Hash-tree based data signature technologies, such as KSI, face challenges in storage efficiency and bandwidth constraints due to the large size of signatures, particularly in devices with limited storage capacity and bandwidth limitations in machine-to-machine and IoT environments, necessitating scalable solutions for data integrity protection.
Innovation Solution
The method involves splitting the hash-tree based data signature into two partial signatures, where one partial signature is stored on the client device and the other on a gateway device or network, reducing storage requirements and enabling efficient communication by using only part of the signature for radio communication, while maintaining data integrity through reassembly for verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the complete KSI signature is stored on the client device, then data integrity verification is enabled, but storage capacity requirements increase significantly
Solution Approach 1:
The patent divides the complete KSI signature into two separate parts: a first part stored on the client device and a second part stored on the gateway device. This segmentation reduces the storage burden on the client device while maintaining the ability to perform complete integrity verification when both parts are combined during the verification process.
2Reliability
If the complete signature is transmitted over the radio interface, then verification capability is provided, but bandwidth consumption increases
Solution Approach 1:
The patent extracts only the necessary first part of the signature from the complete signature and transmits it to the client device via the radio interface. The second part remains on the gateway device, reducing the amount of data transmitted over the limited bandwidth radio connection while preserving verification capability.
3Quantity of substance
If storage capacity on the client device is increased, then more signatures can be stored, but device cost and complexity increase
Solution Approach 1:
By segmenting the signature storage between client device and gateway device, the patent reduces the storage capacity requirements for the client device. This avoids the need for expensive, high-capacity storage components in resource-constrained IoT devices while still enabling comprehensive signature management.
4Reliability
If all signatures are retrieved from a single device with large storage, then verification is enabled, but retrieval time and system complexity increase
Solution Approach 1:
The patent segments signature storage across multiple devices (client device and gateway device), enabling parallel access and retrieval operations. This distribution reduces retrieval time compared to accessing a single centralized storage location, as signatures can be fetched from both locations simultaneously or selectively based on needs.
Data Source
AI summary
A method (30) of handling a hash-tree based data signature is described. The method (30) is performed in a client device (12) and comprises receiving (32), from a gateway device (13), a hash-tree based data signature, and determining (33), based on the received hash-tree based data signature, a first partial signature, P I. A method (60) in a gateway device (13) is also described. A corresponding client device (12) and gateway device (13) are also disclosed, as are related computer programs and computer program products.