Packet Transmitting Apparatus Truncated MAC Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In machine-to-machine (M2M) communication systems with limited computational resources, existing message authentication techniques face challenges in verifying data blocks within narrow-band communication systems, as adding a message authentication code (MAC) to each data block can exceed bandwidth limits, increasing the number of packets and communication load.
Innovation Solution
A packet transmitting apparatus that generates additional data using the message authentication code of a data block and the previous block, allowing verification of the current data block, thereby reducing the size of the additional data and enhancing security without exceeding bandwidth limits.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a message authentication code (MAC) is added to each data block, then data verification capability is improved, but communication bandwidth is exceeded and packet size increases
Solution Approach 1:
The MAC verification process is segmented into two parts: a truncated MAC (first predetermined number of bits) is added to each data block for quick verification, while the remaining MAC bits are accumulated and verified separately. This segmentation allows verification capability to be maintained while reducing the size of each individual packet.
Solution Approach 2:
The patent extracts only the necessary portion of the MAC (truncated MAC) for inclusion with each data block, separating it from the complete MAC. This extraction principle reduces the amount of data that needs to be transmitted with each packet while still providing verification capability.
2Quantity of substance
If the MAC is shortened to reduce packet size, then bandwidth usage is improved, but security strength is reduced
Solution Approach 1:
The complete MAC is segmented into two functional parts: a truncated portion for immediate verification with each packet, and a remaining portion that is accumulated across multiple packets. This segmentation maintains security strength by ensuring the complete MAC is still computed and verified, while reducing the size transmitted with each individual packet.
Solution Approach 2:
The truncated MAC is computed preliminarily and added to each data block before transmission. This preliminary action allows receivers to perform quick verification of individual packets without waiting for the complete MAC, maintaining security while optimizing bandwidth usage.
3Quantity of substance
If multiple packets are used to transmit divided data blocks, then network bandwidth occupancy is reduced, but verification capability is lost until all packets are received
Solution Approach 1:
The verification capability is segmented across packets: each packet contains a truncated MAC for immediate verification of that specific data block. This allows incremental verification as packets arrive, rather than requiring all packets to be received before any verification can occur.
Solution Approach 2:
The truncated MAC provides immediate feedback on the integrity of each received data block. This feedback mechanism allows the receiver to verify individual packets as they arrive, enabling error detection without requiring the complete data set to be assembled first.
Data Source
AI summary
An edit data generation unit concatenates the message authentication code of an X−1th data block with the message authentication code of an Xth data block, thereby generating Xth edit data. An additional data generation unit generates the message authentication code of the Xth edit data, and extracts a portion of the message authentication code of the Xth edit data as Xth additional data. A packet generation unit generates an Xth packet including the Xth data block and the Xth additional data. A packet transmitting unit transmits the Xth packet.