Performance Monitoring Data Encryption in Communication Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current performance monitoring systems in communication networks face challenges in securely handling sensitive subscriber data, particularly due to the high processor capacity requirements of asymmetric encryption algorithms and the need for improved confidentiality and privacy measures.
Innovation Solution
A method and system for handling performance monitoring data in communication networks that involves determining encryption conditions for network nodes, using key management protocols to agree on encryption and decryption keys, and securely storing and decrypting data within a security network operation center, ensuring only authorized entities can access sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric encryption algorithms are used to encrypt performance monitoring data, then data confidentiality is improved, but processor capacity consumption increases significantly
Solution Approach 1:
The encryption process is segmented into two distinct phases: first, asymmetric encryption is used to encrypt a random key (not the actual data), and then symmetric encryption is used to encrypt the performance monitoring data using that key. This segmentation allows the system to benefit from the security of asymmetric encryption while avoiding its high computational cost for bulk data encryption.
Solution Approach 2:
A random key acts as an intermediary between the asymmetric encryption algorithm and the performance monitoring data. The asymmetric algorithm encrypts this intermediary key, which then serves as the key for symmetric encryption of the actual data. This intermediary approach allows the system to use asymmetric encryption only for key management rather than for the entire data stream.
2Use of energy by moving object
If symmetric encryption algorithms are used to encrypt performance monitoring data, then processor capacity consumption is reduced, but key distribution and management complexity increases
Solution Approach 1:
The asymmetric encryption is performed in advance to securely establish and distribute the symmetric encryption key. By using asymmetric encryption beforehand to protect the key exchange process, the system eliminates the need for complex secure key distribution mechanisms for the actual data encryption, as the symmetric key can be safely distributed after being protected by asymmetric encryption.
3Reliability
If performance monitoring data is encrypted at network nodes, then data security is improved, but network node complexity increases
Solution Approach 1:
The complex asymmetric encryption operations are extracted from the network nodes and centralized at the key management server. Network nodes only perform the simpler task of generating random keys and encrypting data with symmetric algorithms, while the computationally intensive asymmetric encryption and key management functions are handled externally by the dedicated server infrastructure.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
System, methods, nodes, and computer program for handling performance monitoring data in a communication network are described. The communication network (100) comprises a plurality of network nodes (102). The performance monitoring data are generated by a network node (102). The performance monitoring data are a stream of data characterizing the performance of the network node (102). The method comprises determining, by the network node (102), whether an encryption condition for encrypting the performance monitoring data is fulfilled. The method further comprises based on the result of determining, encrypting, by the network node (102), the performance monitoring data. The method further comprises subsequent to the encrypting, sending, by the network node (102), the encrypted performance monitoring data to a performance monitoring data collector (112). The method further comprises authorizing, by a security network operation center (114), the performance monitoring data collector (112) to decrypt the encrypted performance monitoring data. The system, nodes, and computer program associated with these methods are also described. Therefore an improved handling of performance monitoring data in a communication network is achieved in terms of improved confidentiality of subscriber data.