Mobile Node Double Encryption Avoidance Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile network deployments face inefficiencies due to redundant double encryption processes, which consume CPU resources and drain battery life, especially in compact devices like PDAs and cellular phones, as they perform multiple encryption and decryption operations across different network layers.
Innovation Solution
A method that avoids double encryption by using a base station to differentiate and manage datagrams with a first identifier for higher-level encryption and a second identifier for L2 encryption, allowing only the necessary decryption at the base station, thereby optimizing resource use and reducing redundant processing in mobile nodes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple encryption and decryption operations are performed at mobile nodes, then security is improved, but CPU resource consumption increases and battery life decreases
Solution Approach 1:
The patent extracts the L2 decryption operation from the mobile node and relocates it to the base station. The mobile node only performs higher-level decryption (SSL/IPSec), while the base station performs the L2 decryption of the outer encryption layer. This separation removes the burden of multiple decryption operations from the mobile device, extending battery life while maintaining security through distributed decryption at appropriate network layers.
Solution Approach 2:
The base station acts as an intermediary between the mobile node and the higher-level security protocols. It receives doubly-encrypted packets, performs L2 decryption, and forwards the result to the mobile node for higher-level decryption. This intermediary approach allows the mobile node to avoid direct participation in L2 decryption, reducing its computational load and energy consumption.
2Reliability
If multiple encryption and decryption operations are performed at mobile nodes, then security is improved, but processing speed decreases
Solution Approach 1:
The patent extracts the L2 decryption operation from the mobile node's processing path and relocates it to the base station. This eliminates one complete encryption/decryption cycle from the mobile node's workload, directly improving processing speed while maintaining security through the base station's participation in the decryption process.
3Reliability
If L2 encryption is applied to all datagrams, then security is improved, but network bandwidth is wasted on redundant encryption of already-encrypted traffic
Solution Approach 1:
The patent applies L2 encryption selectively rather than universally. The base station examines the outer header of incoming packets and identifies those that have already been encrypted at higher levels (SSL/IPSec). Only these already-encrypted packets receive L2 encryption before transmission over the wireless link. This local quality approach ensures that bandwidth is not wasted on double-encrypting packets that don't require it, while still providing L2 security where needed.
Solution Approach 2:
The system uses feedback from examining packet headers to determine whether L2 encryption is necessary. The base station inspects the outer header structure to identify already-encrypted traffic and adjusts its encryption behavior accordingly, avoiding redundant encryption operations that would waste network bandwidth.
Data Source
Figure 1A~1C
Figure 3
Figure 4A~4C
AI summary
A method for enabling a mobile node (10) to transmit encrypted data over a path including a wireless link (2) and an untrusted link (3), while avoiding double encryption on any link. The data on the end -to-end path is encrypted using an application specific security mechanism, or an L2 mechanism is used for encrypting the data on the wireless link (2) as mandated by the wireless standards, and an application specific security mechanism is used for encrypting the data on the untrusted link (3). By avoiding redundant double encryption, the method of the invention results in optimizing the use of network resources in bandwidth-limited wireless networks and increases the life of the mobile node battery.