Parallel Cipher Operations for Wireless Key Transition Latency

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Modern wireless networks face challenges in maintaining robust security due to asynchronous key updates, which lead to increased latency and reduced quality of service, especially during transitions between old and new encryption keys, causing dropped packets and setup lag.

Innovation Solution

A system and method for performing multiple cipher operations in parallel using two or more algorithms and keys, with validation logic to determine the correct result, allowing concurrent processing of old and new keys and algorithms, thereby reducing latency and improving throughput.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If sequential MIC checks are performed with old and new keys, then security is maintained, but CPU time doubles and latency increases

Engineering Contradiction:
ImprovesecurityVSAvoidlatency
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs MIC calculations with both old and new keys in parallel before the key update is complete, so that when the new key becomes active, the MIC checks are already ready. This preliminary parallel computation eliminates the need for sequential checking and reduces latency during key transitions.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The MIC check process is divided into parallel paths: one path computes MIC using the old key while another path computes MIC using the new key. Both paths operate simultaneously on the same input data, and the results are later combined through a multiplexer. This segmentation allows independent concurrent processing of both key versions.

Inventive Principle:
Principle #1Segmentation

2Reliability

If frames are dropped during key updates, then security is maintained, but quality of service deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidquality of service
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system prepares MIC checks for both old and new keys in advance during parallel processing. When frames arrive during key transition, the pre-computed MIC values are immediately available, allowing frames to be processed without dropping. This ensures continuous quality of service while maintaining security through proper key validation.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If double MIC checks are performed, then security is verified, but processing time increases and throughput decreases

Engineering Contradiction:
Improvesecurity verificationVSAvoidthroughput
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The processing workload is segmented into parallel MIC calculation paths that operate simultaneously. Instead of sequentially performing double checks which would double processing time, the system divides the work into concurrent paths that process old and new key MICs in parallel, maintaining security verification while preserving throughput.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Both MIC calculations are performed in advance in parallel before the actual frame processing occurs. This preliminary computation ensures that when frames need to be validated, the MIC results are already ready, eliminating the need for time-consuming sequential re-computation and maintaining high throughput.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS7995753B2Parallel cipher operations using a single data pass
Publication Date: 2011.08.09 CISCO TECHNOLOGY INC
  • US7995753B2 patent drawing
  • US7995753B2 patent drawing
  • US7995753B2 patent drawing

AI summary

Multiple cipher hardware algorithms are run in parallel over an input stream. For example, one algorithm can process the input stream using an old cipher key while a parallel algorithm processes the input stream using the current cipher key. Alternatively, multiple cipher operations can be performed in parallel enabling a receiver to determine which cipher algorithm was employed in encrypting a data packet.