Multilayered Cipher Keystreams for IoT Data Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Low-end IoT nodes face challenges in securing single-channel communications due to hardware constraints and software overheads, making existing lightweight symmetric key block ciphers unsuitable for preserving data authenticity and integrity in IoT networks.

Innovation Solution

A method employing multilayered ciphers generates pairs of encryption/decryption keystreams for pulsed-index communication (PIC) packets, providing first and second layer encryption/decryption to protect data and control information, thereby enhancing security without compromising key performance indicators like complexity, latency, and power consumption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If lightweight symmetric key block ciphers are used for securing single-channel IoT communications, then data authenticity and integrity are improved, but hardware constraints and software overheads worsen performance

Engineering Contradiction:
Improvedata authenticity and integrityVSAvoidhardware constraints and software overheads
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The encryption process is segmented into two distinct layers: first layer encryption for PIC data and second layer encryption for control information (flags and NOI). This segmentation allows each layer to be optimized independently, reducing overall system complexity while maintaining security

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements nested encryption where the first layer encryption is applied to PIC data, then the resulting encrypted data is further protected by second layer encryption on control information. This nested structure provides enhanced security without requiring completely separate encryption systems

Inventive Principle:
Principle #7Nested doll (Nesting)

2Reliability

If multilayered encryption is implemented on PIC packets, then security against malicious attacks is improved, but complexity and computational overhead increase

Engineering Contradiction:
Improvesecurity against malicious attacksVSAvoidcomplexity and computational overhead
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Different encryption approaches are applied to different parts of the PIC packet: the first layer uses encryption on PIC data itself, while the second layer applies encryption specifically to control information elements (flags and NOI). This localized approach ensures security where needed without unnecessarily complicating the entire system

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent adds a dimensional aspect to encryption by introducing a second layer that operates on control information separately from the data layer. This multi-dimensional approach enhances security without requiring exponential increases in computational complexity

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

3Productivity

If existing lightweight ciphers are used for single-channel communication, then data rate is maintained, but security and reliability deteriorate

Engineering Contradiction:
Improvedata rateVSAvoidsecurity and reliability
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The dual-layer encryption process is designed to operate continuously without interrupting the PIC communication flow. The encryption operations are integrated into the existing PIC protocol framework, maintaining continuous data transmission while providing enhanced security

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS10951596B2Method for secure device-to-device communication using multilayered cyphers
Publication Date: 2021.03.16 KHALIFA UNIV OF SCI & TECH
  • US10951596B2 patent drawing
  • US10951596B2 patent drawing
  • US10951596B2 patent drawing

AI summary

A method for secure device-to-device communication using multilayered ciphers is provided. A selected cipher is employed to generate a pair of encryption/decryption keystreams for enabling multilayered encryption/decryption on a pulsed-index communication (PIC) packet(s). In examples discussed herein, a first layer encryption/decryption is performed by encrypting/decrypting a PIC data(s) (PD(s)) in the PIC packet(s) based on a first of the pair of encryption/decryption keystreams. In addition, a second layer encryption/decryption is performed by encrypting/decrypting selected control information (e.g., information related to encoding/decoding the PD(s)) in the PIC packet(s) based on a second of the pair of encryption/decryption keystreams. By performing multilayered encryption/decryption on the PIC packet(s), it is possible to defend against malicious attacks in single-channel device-to-device communication without compromising such key performance indicators (KPIs) as complexity, latency, power consumption, and footprint.