Hybrid Encryption Key Management for Embedded Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional hybrid encryption methods face performance bottlenecks due to the complexity of public-key operations in asymmetric encryption, particularly in software implementations for embedded systems and microcontrollers, which require significant computing power.
Innovation Solution
A method that accelerates decryption by verifying the presence of an asymmetrically encrypted key using a private key and decrypting user data units with the cryptographic key, either present or decrypted, to reduce computational demands and circuit complexity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric encryption is used for key management, then key security and flexibility are improved, but decryption performance and computing power requirements deteriorate
Solution Approach 1:
The patent segments the encryption process into two parts: asymmetric encryption for key management and symmetric encryption for data encryption. This segmentation allows each part to use the most appropriate algorithm, with asymmetric encryption handling only the key exchange and symmetric encryption handling the bulk data, thus resolving the contradiction between key security and decryption performance
Solution Approach 2:
The patent introduces a symmetric session key as an intermediary between the asymmetric key pair and the actual data encryption. The asymmetric encryption only secures the transmission of this intermediate key, while the symmetric key handles the actual data encryption, thereby improving decryption performance without compromising key security
2Adaptability or versatility
If public-key operations are performed frequently, then key management flexibility is improved, but computational complexity and circuit complexity increase
Solution Approach 1:
The patent extracts the computationally intensive public-key operations from the data encryption process and confines them to only the key exchange phase. By taking out the asymmetric encryption from the frequent data processing operations and using it only for initial key establishment, the circuit complexity is significantly reduced while maintaining key management flexibility
Solution Approach 2:
The patent changes the operational parameters by using asymmetric encryption only for key establishment and then switching to symmetric encryption for data processing. This parameter change reduces the frequency and complexity of public-key operations from every data operation to only initial key exchange, thereby reducing circuit complexity
Data Source
AI summary
A method and system for accelerated decryption of a cryptographically protected user data unit, wherein a transmitter initially generates a cryptographic key that is provided with a related key identification. The transmitter then performs asymmetrical encryption of the generated cryptographic key using a public cryptographic key and encryption of at least one user data unit using the generated cryptographic key. The encrypted user data unit, the asymmetrically encrypted cryptographic key and the related key identification of the cryptographic key are transported to a receiver that decrypts the received asymmetrically encrypted key using a private key, if verification of the received related key identification of the cryptographic key indicates the cryptographic key is not present in a decrypted state in the receiver. The receiver then decrypts the received cryptographically encrypted user data unit using the cryptographic key in the receiver or with the cryptographic key decrypted using the private key.