Non-Terrestrial Message Routing With Partial Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems using non-terrestrial networks face challenges in ensuring data security and regulatory compliance for emergency calls, particularly when transferring messages across different sovereign territories, as conventional encryption methods compromise the integrity of the communication link.
Innovation Solution
A method involving partial encryption of messages using a first key, allowing transmission over non-terrestrial links, with decryption at a designated termination point using a second key, ensuring data security and compliance by maintaining control over encryption and decryption within the home network operator's domain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complete encryption of the message is applied, then data security is improved, but the third-party non-terrestrial communication operator cannot forward the message to the correct destination
Solution Approach 1:
The message is segmented into different parts with different encryption levels. The termination point information is left unencrypted to enable routing, while the payload data is encrypted to ensure security. This segmentation allows both forwarding capability and data security to coexist.
Solution Approach 2:
Different parts of the message have different quality characteristics regarding encryption. The termination point information has low encryption (unencrypted) to facilitate routing operations, while the payload data has high encryption to protect sensitive information. This local differentiation resolves the contradiction between security and operability.
2Ease of operation
If unencrypted transmission is used over non-terrestrial links, then message forwarding is enabled, but data security and tamper-resistance are compromised
Solution Approach 1:
The message structure is segmented into routing information (unencrypted) and payload data (encrypted). This allows the unencrypted portion to facilitate forwarding while the encrypted portion maintains security, resolving the contradiction between operability and reliability.
3Adaptability or versatility
If eCalls are transmitted over NTN networks from abroad, then communication coverage is improved, but regulatory compliance and locality requirements are violated
Solution Approach 1:
The home network operator acts as an intermediary that maintains control over the encrypted eCall message. By keeping the decryption key and control mechanisms within the home network operator's domain, the system enables international coverage while maintaining regulatory compliance through the intermediary's oversight.
Solution Approach 2:
Encryption is performed in advance by the sender using keys managed by the home network operator before the message leaves the home territory. This preliminary encryption action ensures that even when transmitted over foreign NTN networks, the message remains secure and compliant with home country regulations.
4Ease of operation
If partial encryption is applied to allow forwarding, then message delivery is enabled, but end-to-end encryption and tamper-resistance are reduced
Solution Approach 1:
The message is divided into routing information (unencrypted for delivery) and payload data (encrypted for tamper-resistance). This segmentation enables message delivery while preserving end-to-end encryption for the critical payload portion.
Solution Approach 2:
Different portions of the message have different encryption qualities appropriate to their function. The payload data receives high encryption quality for tamper-resistance, while routing information has low encryption quality to enable delivery operations.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
Techniques for securely transmitting a message from a sender to a receiver by means of a communication link, the communication link comprising, at least in part, a non-terrestrial data link of a third-party communication provider, the method comprising the steps of: • Generating a message by the sender, the message having at least information about a termination point of the message and payload data; • Partial encryption of the message by the sender using a first key, leaving at least the termination point information unencrypted; • Sending the encrypted message by means of the sender via a non-terrestrial data link to a non-terrestrial transceiver of a foreign operator, the non-terrestrial transceiver forwarding the message to the network of the foreign operator; • Forwarding the message to the termination point, with a second key held at the termination endpoint for decryption; • At least partial decryption of the message at the termination point.