IoT Cryptosystem Using Multi-Dimensional Cubic Array for Per-Packet Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cryptographic algorithms for IoT devices in Wireless Sensor Networks (WSNs) face challenges due to resource constraints such as limited computing power, memory, and battery life, making existing security solutions expensive, resource-intensive, and ineffective in providing reliable encryption that is both secure and efficient.
Innovation Solution
A lightweight cryptosystem that uses a multi-dimensional cubic array to generate per-packet keys for encrypting and decrypting data, ensuring data confidentiality, integrity, and authentication, while being resistant to brute force attacks, and does not consume excessive power or memory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If current cryptographic algorithms are used for IoT devices, then security protection is provided, but resource consumption (power, memory, computing power) increases excessively
Solution Approach 1:
The cryptographic algorithm is divided into multiple rounds of operations, where each round performs a portion of the encryption/decryption process. This segmentation allows the computation to be distributed across multiple smaller steps, reducing the peak power consumption at any single moment while maintaining overall security strength through cumulative effect of multiple rounds.
Solution Approach 2:
The encryption and decryption processes are structured to operate in periodic cycles with defined rounds. Each round processes data in discrete time intervals, allowing the system to enter low-power states between active computation cycles. This periodic operation pattern reduces average power consumption compared to continuous processing.
2Reliability
If current cryptographic algorithms are used for IoT devices, then security protection is provided, but memory usage increases excessively
Solution Approach 1:
Complex lookup tables and pre-computed values that would normally require significant memory storage are extracted and replaced with on-the-fly computation using simple mathematical operations. This extraction of memory-intensive components reduces the memory footprint while maintaining cryptographic strength through computational equivalence.
Solution Approach 2:
The algorithm uses temporary registers and variables that are created and discarded in each encryption/decryption round rather than maintaining large persistent data structures. These short-lived computational objects consume minimal memory and are regenerated each round, reducing overall memory requirements compared to algorithms requiring large static tables.
3Reliability
If current cryptographic algorithms are used for IoT devices, then security protection is provided, but device complexity and cost increase
Solution Approach 1:
Complex cryptographic operations that would traditionally require dedicated hardware circuits or complex instruction sets are replaced with software-based mathematical operations that can be executed by simple microcontrollers. This substitution of mechanical/hardware complexity with software algorithms reduces device complexity and cost while maintaining security functionality.
Solution Approach 2:
The algorithm uses variable parameters such as the number of rounds and operation types that can be adjusted based on security requirements and device capabilities. This parameterization allows the same basic algorithm structure to provide different security levels without requiring fundamentally different hardware, reducing overall system complexity.
Data Source
AI summary
Systems and methods to secure data transmission between IoT sensors and their base station that may include use of a sensor system to obtain sensor data and generate per-packet keys to obtain corresponding values from a multi-dimensional cubic array. The sensor data may be encrypted based on the multi-dimensional cubic array to generate an encrypted data value which is transmitted to a wireless access point then decrypted using the plurality of per-packet keys.