Optical Network Encryption Key Generation Using TLS and GCC0
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The generation and secure exchange of encryption keys in optical communication networks are computationally intensive and slow, especially as the number of nodes increases, constraining the use of encryption in dense communication systems.
Innovation Solution
A method is introduced that uses a Transport Layer Security (TLS) connection to generate and share an encryption key between ports in an optical transport network, which is then stored and used for encrypting and decrypting payload data using a different encryption protocol, such as Galois/counter mode (GCM) with an Advanced Encryption Standard (AES)-256 key, without relying on the TLS connection for data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption key generation and exchange is performed using traditional methods in optical networks, then security is provided, but computational overhead increases and key generation becomes slow
Solution Approach 1:
The patent extracts the encryption key generation process from the main data transmission path by using a separate communication channel (GCC0 or out-of-band channel). The TLS connection is established independently to generate and exchange encryption keys, while the actual payload data transmission uses a different path. This separation removes the computational burden of key generation from the critical data transmission path, improving both security and speed.
Solution Approach 2:
The patent performs encryption key generation and exchange as a preliminary action before actual data transmission begins. The TLS connection is established in advance to securely generate and share encryption keys between transmitter and receiver. Once the keys are exchanged and stored, the actual payload data can be transmitted efficiently using pre-configured encryption without the overhead of real-time key generation.
2Adaptability or versatility
If the number of nodes in the optical network increases, then network density and communication capacity improve, but encryption key generation becomes more computationally intensive and slower
Solution Approach 1:
The patent introduces an intermediary communication channel (GCC0 or out-of-band channel) that mediates the encryption key exchange process. This intermediary channel handles the computationally intensive TLS key generation and exchange separately from the main data transmission paths. By using this intermediary, the system can support multiple nodes and paths without proportionally increasing the computational complexity at each node, as the key management overhead is handled through the dedicated intermediary channel.
3Reliability
If TLS connection is used for both key generation and data transmission, then security is maintained, but computational overhead and processing time increase
Solution Approach 1:
The patent segments the communication functions into distinct parts: the TLS connection is used solely for encryption key generation and exchange, while a separate mechanism handles payload data transmission. This segmentation allows the TLS protocol to be applied only where needed (key exchange), reducing the overall processing time while maintaining security. The actual data transmission does not require repeated TLS handshakes, eliminating redundant computational overhead.
Data Source
AI summary
Methods and systems for simplified encryption key generation in optical networks use a Transport Layer Security (TLS) protocol to securely generate an encryption key at both endpoints of an optical path provisioned in an optical transport network. Instead of generating yet another key for payload data transmission, the encryption key from TLS is used for encrypting payload data transmission without using the TLS protocol.