Onboard Encryption Key Generation for Ground-Free Satellite Links

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Satellite communication systems are vulnerable to cyberattacks due to the susceptibility of ground infrastructure, particularly the Internet network, which is prone to hacking, tapping, and eavesdropping, as encryption keys are generated by ground-based hardware and software units.

Innovation Solution

A satellite communication system that generates encryption keys using on-board hardware and software located on key generating satellites, eliminating the need for ground infrastructure, and includes backup satellites for redundancy.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If ground-based hardware encryptor/decryptor units are used for data encryption, then secure uplink and downlink protection is provided, but the system becomes vulnerable to ground-based cyberattacks including hacking, tapping, and eavesdropping

Engineering Contradiction:
Improvedata securityVSAvoidcyberattack vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the encryption key generation function from ground-based infrastructure and relocates it to satellites. The key generating satellite performs encryption key generation in space, eliminating the need for ground-based hardware encryptor/decryptor units and their associated cyberattack vulnerabilities.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a key generating satellite as an intermediary between ground stations and communication satellites. This intermediary generates and distributes encryption keys through space-based communication, creating a secure channel that avoids ground-based infrastructure vulnerabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If encryption keys are generated using ground-based hardware units, then data protection is achieved, but signal jamming and data interception via ground infrastructure become possible

Engineering Contradiction:
Improvecommunication securityVSAvoidsignal jamming and data interception
Core Design Contradiction:
ReliabilityVSObject-generated harmful factors

Solution Approach 1:

The patent moves encryption key generation from the ground dimension to the space dimension. By performing key generation in orbit, the system creates a new operational dimension that is physically separated from ground-based jamming and interception capabilities.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

3Adaptability or versatility

If ground infrastructure is used for encryption key distribution, then existing systems can be utilized, but hacking and eavesdropping via Internet networks become vulnerable

Engineering Contradiction:
Improvesystem compatibilityVSAvoidhacking and eavesdropping vulnerability
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent replaces the mechanical/infrastructure-based key distribution system (ground-based hardware and Internet networks) with a space-based system. Encryption keys are generated and distributed through satellite communication, substituting the vulnerable ground infrastructure with a space-based alternative.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12407505B1Encryption key generating satellite
Publication Date: 2025.09.02 KAEN HOOSHANG
  • US12407505B1 patent drawing
  • US12407505B1 patent drawing
  • US12407505B1 patent drawing

AI summary

A method of communication between first and second communication devices includes receiving a connection request at a first communication satellite from a first communication device to connect to a second communication device; sending the connection request from the first communication satellite to a key generating satellite; generating first and second encryption keys by the key generating satellite using only hardware and software onboard the key generating satellite; sending the first key from the key generating satellite through the first communication satellite to the first communication device; sending the second encryption key from the key generating satellite through a second communication satellite to the second communication device; and exchanging the signals encrypted by the first and second encryption keys between the first and second communication devices through the first and second communication satellites, where the communication between the first and second communication devices does not route through any terrestrial networks.