PQC-Based MQTT Broker Encryption for Quantum-Resistant Messaging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing MQTT communication protocols face challenges in ensuring security against quantum computing threats due to the computational demands of post-quantum cryptography (PQC) and the limited resources of MQTT clients and brokers, making it difficult to implement PQC without significant updates.
Innovation Solution
A PQC-based MQTT communication method that employs a PQC processing module in MQTT brokers to perform encryption and decryption, allowing communication in both PQC and non-PQC modes, thereby enhancing security without requiring updates to MQTT clients.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If post-quantum cryptography (PQC) is applied to MQTT communication, then security against quantum computing threats is improved, but computing resource requirements and complexity increase significantly
Solution Approach 1:
The system divides PQC functionality into separate modules: a PQC processing module that handles complex cryptographic operations independently from the main MQTT broker logic. This segmentation allows the broker to maintain its simple arithmetic operations while offloading PQC computations to a dedicated module, reducing overall system complexity.
Solution Approach 2:
A PQC processing module acts as an intermediary between the MQTT broker and PQC algorithms. This intermediary handles the computationally intensive PQC operations, allowing the broker to communicate using standard MQTT protocols while securing transmissions with PQC encryption without requiring the broker itself to have enhanced computing capabilities.
2Reliability
If PQC is implemented in existing MQTT clients, then security is improved, but update costs and time consumption increase
Solution Approach 1:
Instead of requiring MQTT clients to implement PQC, the system inverts the approach by implementing PQC in the MQTT broker. The broker performs PQC-based encryption on messages received from clients, allowing clients to continue using standard MQTT protocols without any updates or modifications.
Solution Approach 2:
The MQTT broker provides PQC security services to clients without requiring clients to have PQC capabilities. The broker self-services the security function by automatically encrypting messages using PQC algorithms, eliminating the need for client-side implementation and updates.
3Reliability
If PQC is applied in MQTT brokers with limited arithmetic capacity, then security is improved, but operational feasibility decreases
Solution Approach 1:
The system segments PQC operations into a separate processing module that can be selectively activated. This allows brokers with limited arithmetic capacity to maintain their simple operations while optionally utilizing PQC processing when available, making PQC adoption gradual and feasible even for resource-constrained brokers.
Solution Approach 2:
The system implements PQC partially by allowing brokers to operate in both PQC mode and non-PQC mode. Brokers can selectively apply PQC to specific message types or communication scenarios rather than requiring full PQC implementation, making the transition feasible for brokers with limited computing resources.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present disclosure relates to a PQC-based MQTT communication method, device, system, and computer program, and more particularly, to a PQC-based communication method, device, system, and computer program enabling PQC-based communication between MQTT brokers. The present disclosure provides a PQC-based MQTT communication method performed by one or more processors in a first MQTT broker, the method including: collecting a message from one or more MQTT clients; performing PQC-based encryption on the collected message by using a PQC processing module; and transmitting the encrypted message to a second MQTT broker.