Lightweight Security Scheme for IoT Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security schemes for data communication in systems like video surveillance and IoT face challenges in supporting low-performance devices, leading to communication failures and reliability issues due to high processing loads and complex encryption complexities.
Innovation Solution
A lightweight security scheme using a symmetrical encryption key generated through time synchronization and blockchain, where the encryption key is created by combining a time difference with a hash value from a previous block in the blockchain, reducing processing load and enhancing security by easily detecting key forgery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing encryption schemes are used to ensure data security, then security is improved, but device complexity and processing load increase significantly
Solution Approach 1:
The patent extracts the complex encryption key generation process from the terminal device and relocates it to a dedicated key management server. The terminal only needs to store and use pre-generated encryption keys, eliminating the need for complex encryption operations at the terminal while maintaining strong security through AES-256 encryption.
Solution Approach 2:
The patent introduces a key management server as an intermediary between terminals and the encryption process. This server handles key generation, distribution, and management, acting as a mediator that reduces the computational burden on terminals while ensuring secure key management through blockchain technology.
2Reliability
If hardware configuration supporting security protocol is installed in terminal devices, then security is improved, but processing load and communication failures increase
Solution Approach 1:
The patent extracts the security protocol processing from terminal devices and centralizes it in key management servers. Terminals only perform simple key storage and usage operations, while complex security operations are handled by servers, reducing terminal processing load and improving communication stability.
Solution Approach 2:
The patent implements automatic key management where the system self-generates, self-distributes, and self-manages encryption keys through blockchain technology. This automated approach eliminates the need for manual key configuration and reduces the processing burden on terminal devices.
3Reliability
If complex encryption schemes are used, then security is improved, but processing load on terminal devices increases
Solution Approach 1:
The patent extracts energy-intensive encryption operations from terminal devices and relocates them to key management servers with sufficient computational resources. Terminals only perform lightweight key storage and decryption operations, dramatically reducing their energy consumption while maintaining strong security through server-side AES-256 encryption.
Solution Approach 2:
The key management server acts as an intermediary that handles all computationally intensive encryption and key generation operations. This mediator approach allows terminals to use strong encryption schemes without bearing the energy cost, as the server absorbs the processing load.
4Reliability
If blockchain technology is used to secure encryption keys, then key security is improved, but system complexity increases
Solution Approach 1:
The patent introduces a key management server as an intermediary that handles all blockchain interactions for key generation and management. This centralizes the complexity of blockchain operations in a single point, allowing terminals to benefit from blockchain-secured keys without directly dealing with blockchain complexity.
Solution Approach 2:
The patent extracts blockchain complexity from the distributed terminal network and concentrates it in a centralized key management server. The server handles all blockchain operations including key generation, storage, and verification, while terminals simply use the keys provided by the server, reducing overall system complexity at the terminal level.
Data Source
AI summary
The present invention relates to security service providing apparatus and method for supporting lightweight security which provides lightweight security by using an error coefficient and a hash of a chain block used for time synchronization with the terminal for generation of an encryption key to improve security complexity while securing security for communication with terminals and also securing security for an encryption key through the blockchain. According to the present invention, for security for the communication session between the service providing apparatus and the terminal, the encryption key of the terminal is generated as the hash through the hash algorithm by combining the time difference generated in the time synchronization process with the terminal and the hash generated based on the information related to the encryption key of the other terminal stored in the blockchain to generate a symmetrical encryption key which cannot be inferred and has high security.