OpenZR+ Frame Encryption Using Padding-Aligned Payload Blocks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The size of the payload area in ZR frames is not divisible by the number of bits required for certain encryption schemes, such as a 256-bit encryption scheme, making it challenging to apply these schemes effectively to ZR frames.
Innovation Solution
Incorporating padding bits within the ZR frames to ensure the total number of encrypted bits is divisible by the set number of bits for the encryption scheme, allowing for encryption blocks of a size that corresponds to the particular encryption scheme, and encrypting data of client signals separately before packaging them into ZR frames.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If padding bits are added to make the payload divisible by encryption block size, then encryption compatibility is improved, but frame structure complexity increases
Solution Approach 1:
The patent applies preliminary action by adding padding bits to the payload before the encryption process. This pre-processing step ensures that the total payload size is divisible by the encryption block size (e.g., 256 bits), allowing standard encryption schemes to be applied without modification. The padding is calculated and inserted in advance, making the subsequent encryption operation straightforward and compatible with standard algorithms.
2Reliability
If client signals are encrypted separately before packaging, then security is improved, but processing complexity increases
Solution Approach 1:
The patent applies segmentation by dividing the encryption process into separate operations for each client signal. Each client signal is encrypted independently using its own encryption key and algorithm before being packaged into the ZR frame structure. This segmented approach enhances security by isolating encryption operations, so that compromise of one client's encryption does not affect others, while maintaining organized processing through the structured packaging phase.
Data Source
AI summary
According to an aspect of an embodiment, operations may include receiving an Ethernet signal. The operations may further include creating a bitstream from the Ethernet signal which may include a payload of client information and a set of padding bits. The operations may also include encrypting, using an encryption scheme with an encryption key for a set number of bits, a total payload wherein the total payload may include a combination of the payload of client information and at least one bit from the set of padding bits such that the total payload is divisible by the set number of bits. Further, the operations may include generating a frame from the bitstream which may include the total payload.