Mesh Network Intermediary for Encrypted Data Transmission

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Communication systems used in social infrastructure, such as monitoring cameras, face challenges in ensuring data security due to the difficulty in frequently replacing equipment and the lack of sufficient resources for encryption processing, leading to insufficient security measures.

Innovation Solution

A communication system is implemented with first and second communication control devices that form a mesh network, where the first devices encrypt data using the controller and perform mutual authentication with the second device before transmitting it through a secure communication path, utilizing protocols like SSL/TLS to enhance security without requiring changes to existing client or server devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encryption processing is implemented to improve data security, then security is improved, but device complexity and processing resources are increased

Engineering Contradiction:
Improvedata securityVSAvoidprocessing resources
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a communication control device as an intermediary between the monitoring camera and the network. This intermediary device handles the encryption and decryption operations, allowing the camera itself to remain simple while still achieving secure data transmission. The communication control device acts as a mediator that provides security functions without requiring changes to the original camera hardware.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If mutual authentication is performed to prevent malicious access, then security is improved, but communication time is increased

Engineering Contradiction:
Improvesecurity against malicious accessVSAvoidcommunication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary authentication of the communication path before actual data transmission begins. The authentication process verifies the legitimacy of both the monitoring camera and the communication control device in advance, establishing a secure channel ahead of time. This preliminary action ensures that subsequent data transmissions occur over a verified secure path, balancing security requirements with communication efficiency.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If existing equipment is used without replacement to reduce costs, then ease of operation is improved, but security measures become insufficient

Engineering Contradiction:
Improveequipment replacementVSAvoidsecurity measures
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The communication control device serves as an intermediary layer that enables existing monitoring cameras to communicate securely without requiring replacement. The intermediary device provides encryption and authentication functions that enhance the security of data from legacy cameras while maintaining compatibility with existing equipment. This approach allows security improvements without the need to replace existing infrastructure.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The communication control device is designed with universal functionality that can work with various types of monitoring cameras and network configurations. It provides multiple security functions including encryption, decryption, and mutual authentication, making it a versatile solution that enhances existing equipment without requiring specific hardware changes or frequent replacements.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12120511B2Communication system transmitting encrypted data
Publication Date: 2024.10.15 KK TOSHIBA
  • US12120511B2 patent drawing
  • US12120511B2 patent drawing
  • US12120511B2 patent drawing

AI summary

According to an embodiment, a communication system includes a plurality of first communication control devices and a second communication control device. The first communication control devices each includes a wireless communication unit and a controller. When receiving data to be transmitted from the first device to the second device, the controller determines a communication path in the mesh network for transmission of the data to the network communication network from the first communication control device that receives the data, performs mutual authentication with the second communication control device communicating via the communication path and the network communication network, and thereafter transmits encrypted data obtained by encrypting the data to the second communication control device.