Hybrid Encryption for Low-Power Secure Data Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing secure real-time transport protocol (SRTP) methods are limited by high computational requirements and increased network traffic, making them unsuitable for devices with low processing power and leading to compromised security in scenarios like CCTV systems with multiple IP cameras.

Innovation Solution

A method that employs a first encryption scheme with high computational load to encrypt a random key, which is then used with a second encryption scheme of lower computational load to encrypt data, thereby reducing the operational load on devices with low processing power.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If SRTP encryption is applied to secure data transmission, then security is improved, but computational load and network traffic increase making it unsuitable for low-power devices

Engineering Contradiction:
ImprovesecurityVSAvoidcomputational load
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The encryption process is segmented into two distinct phases: a key establishment phase using high-security SRTP encryption, and a data transmission phase using lightweight encryption algorithms. This segmentation allows the system to achieve both high security during key exchange and low computational load during actual data transmission, resolving the contradiction between security and energy consumption.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A pre-shared key or certificate acts as an intermediary between the high-security SRTP protocol and the lightweight encryption algorithm. The SRTP-established key is used to securely derive session keys for the lightweight encryption, mediating between the need for high security and the requirement for low computational overhead in resource-constrained devices.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If SRTP encryption is applied to secure data transmission, then security is improved, but network traffic increases reducing efficiency

Engineering Contradiction:
ImprovesecurityVSAvoidnetwork efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The encryption approach is segmented such that only essential authentication and key information is transmitted using SRTP, while the actual data payload uses more efficient lightweight encryption. This reduces the overall overhead and improves network efficiency while maintaining security requirements.

Inventive Principle:
Principle #1Segmentation

3Reliability

If multiple IP cameras use SRTP encryption, then security is improved, but devices with low processing power cannot encrypt data compromising security

Engineering Contradiction:
ImprovesecurityVSAvoiddevice compatibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The encryption parameters are changed based on device capabilities. High-end devices continue to use full SRTP encryption, while low-power devices switch to lightweight encryption algorithms. This parameter adaptation ensures that all devices can participate in secure communication regardless of their processing power, improving ease of operation while maintaining security.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The encryption method dynamically adapts to the capabilities of the communicating devices. The system can switch between SRTP and lightweight encryption based on device processing power, making the security system flexible and compatible with a wide range of devices from low-power IP cameras to high-performance servers.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS12244706B2Method of securely communicating data
Publication Date: 2025.03.04 UNIONPLACE CO LTD
  • US12244706B2 patent drawing
  • US12244706B2 patent drawing
  • US12244706B2 patent drawing

AI summary

According to one aspect of the technique of the present disclosure, there is provided a method for securely communicating data. The method includes: (a) establishing a first encryption scheme, a data integrity checking scheme, an encryption key and an authentication key through a communication connection with a receiver; (b) generating a random key; (c) generating secure data including random key information obtained by encrypting the random key using the encryption key and the first encryption scheme; authentication information generated based on the random key, the data integrity checking scheme and the authentication key; and data information obtained by encrypting data using the random key and a second encryption scheme whose operation load is lower than that of the first encryption scheme; and (d) transmitting the secure data to the receiver.