Organically Derived Synchronized Processes for Secure IoT Communications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT systems face security challenges due to high complexity, increased latency, and decreased communication efficiency caused by certificate-based communication security methods like PKI, which lead to interception and injection of unauthorized data.
Innovation Solution
The implementation of a certificate-free, zero knowledge authentication process using Organically Derived Synchronized Processes (ODSP) for secure machine-to-machine communications, which involves storing a parameter data set with a seed value, generating a cipher key, encrypting user data, and transmitting it between nodes within a security group for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If certificate-based communication security (PKI) is used, then security against interception and injection is improved, but device complexity and deployment cost increase
Solution Approach 1:
The patent extracts and eliminates the certificate management component from the security system. By using pre-shared symmetric keys instead of public key infrastructure, the system removes the need for certificate generation, validation, and renewal operations, thereby reducing device complexity while maintaining security through alternative means
Solution Approach 2:
The patent uses symmetric key cryptography where both communicating parties hold identical copies of the same key. This copying approach replaces the asymmetric key pair system, allowing simplified security operations where the same key material is shared and replicated across devices without requiring complex certificate chains
2Reliability
If certificate-based communication security (PKI) is used, then security is improved, but link establishment time and latency increase
Solution Approach 1:
The patent implements preliminary action by pre-configuring symmetric keys in devices before communication begins. This eliminates the need for time-consuming certificate exchange and validation during link establishment, as the secure channel can be initiated directly using the pre-shared key material
Solution Approach 2:
By using symmetric key cryptography with identical key copies at both ends, the system eliminates the asymmetric key exchange protocol that requires multiple communication rounds for certificate validation, thereby reducing establishment time and latency while maintaining equivalent security
3Reliability
If certificate-based communication security (PKI) is used, then security is improved, but processing power and power consumption increase
Solution Approach 1:
The patent employs symmetric key cryptography where identical key copies are used for both encryption and decryption operations. This approach is computationally more efficient than asymmetric cryptography, reducing processing power requirements and energy consumption while maintaining security through the shared key mechanism
Solution Approach 2:
The patent uses simpler symmetric key operations that are computationally cheaper and more energy-efficient compared to complex asymmetric operations. The symmetric keys can be quickly generated, exchanged, and rotated, providing a lightweight security solution that consumes less power while maintaining adequate security for the application
Data Source
AI summary
This disclosure provides a system and method for secure communications. The method can enable secure machine-to-machine communications within discrete security groups having two or more communication nodes using a zero knowledge authentication process and related cryptography. A first node in the security group can encrypt payload data using a synchronized data set known to the member nodes of the security group and a parameter data set. A second node in the security group can decrypt the payload data using the seed and the parameter data set. The seed can be provisioned within each node of the security group. The seed can also be provided or changed by a node or another entity to modify the security group membership. Member nodes of the security group can be added or removed as needed. Nodes not having the SDS cannot communicate securely with security group member nodes.