PRBS Encryption for Constrained IoT Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT protocols, such as MQTT, are becoming increasingly vulnerable to security risks due to their lightweight and cost-effective nature, with existing security solutions like TLS imposing additional resource requirements that are incompatible with large-scale IoT deployments.
Innovation Solution
Implementing a method that uses a Pseudo Random Binary Sequence (PRBS) applied through a Linear Feedback Shift Register (LFSR) for encryption and decryption of messages in constrained devices and entities, allowing for secure communication without significant resource overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TLS protocol is used for encryption in MQTT communications, then security is improved, but resource consumption (processing power, memory, energy) increases making it incompatible with constrained IoT devices
Solution Approach 1:
The patent replaces expensive, resource-intensive TLS encryption with a cheap, lightweight encryption mechanism using PRBS sequences. This allows constrained IoT devices with limited processing power and memory to achieve encryption capability without significant resource overhead, effectively providing security protection comparable to simpler protocols while maintaining protocol lightness.
Solution Approach 2:
The patent changes the encryption parameter from complex cryptographic algorithms (TLS) to simple pseudo-random binary sequences (PRBS). This parameter change reduces computational complexity and resource requirements while maintaining the fundamental security function of encrypting MQTT messages between devices and servers.
2Quantity of substance
If MQTT protocol is used for lightweight communication, then bandwidth efficiency is improved, but security vulnerabilities increase due to lack of built-in encryption
Solution Approach 1:
The patent merges the lightweight MQTT communication protocol with a simplified encryption mechanism (PRBS). By combining these two elements, the system achieves both bandwidth efficiency from MQTT and security protection from encryption, eliminating the vulnerability of unencrypted MQTT while maintaining its resource efficiency.
Solution Approach 2:
The patent introduces an intermediary encryption layer using PRBS sequences between the MQTT message transmission and network channel. This intermediary provides security protection without interfering with the lightweight nature of MQTT, effectively mediating between the need for efficiency and the need for security.
3Device complexity
If even lighter protocols like MQTT-SN are used to reduce device size and cost, then device complexity is reduced, but security vulnerabilities are exacerbated
Solution Approach 1:
The patent applies the same lightweight encryption approach to MQTT-SN and similar ultra-light protocols. By using simple PRBS sequences instead of complex cryptographic libraries, the patent enables these minimalistic protocols to achieve security without increasing device size, cost, or complexity, making security viable even for the most constrained IoT devices.
Data Source
AI summary
A method (600) for operating a constrained device is disclosed, the constrained device being operable to communicate with an entity over a network. The method, performed by the constrained device, comprises generating a message for transmission to the entity (602), encrypting the generated message by applying a Pseudo Random Binary Sequence (PRBS) to the generated message (604), and transmitting the encrypted message to the entity (606). Also disclosed is a method (700) for operating an entity comprising receiving an encrypted message from a constrained device (702) and decrypting the encrypted message by applying a PRBS to the encrypted message. In some examples of the present disclosure, a constrained device and entity may dynamically renew the PRBS used for encryption and decryption of exchanged messages.