Pre-computed Encrypted Alert Storage for Secure IoT Reconnection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing and maintaining secure connections to resource-constrained devices, such as temperature sensors and healthcare monitors, is time-consuming and power-consuming due to the complexity of public key cryptography, especially when connections need to be re-established after failures or inactivity.
Innovation Solution
A method and system for managing connections between devices and server resources, involving establishing a secure connection, registering a connection identifier, pre-computing an encrypted alert with a future communication sequence number, and storing it in a database for later retrieval when the connection needs to be reset, allowing for efficient re-establishment without delay.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key cryptography is used to establish secure connections to resource-constrained devices, then connection security is improved, but connection establishment time and power consumption increase
Solution Approach 1:
The patent pre-computes and stores encrypted alerts with pre-defined future communication sequence numbers in a database before actual connection reset is needed. When connection reset is required, the pre-computed alert is immediately transmitted without requiring time-consuming cryptographic operations at that moment, thus resolving the time consumption issue while maintaining security through the pre-established cryptographic materials
2Reliability
If public key cryptography is used to establish secure connections to resource-constrained devices, then connection security is improved, but power consumption increases
Solution Approach 1:
The system performs power-intensive cryptographic operations (key generation, certificate validation, alert encryption) in advance when the device has sufficient power resources. The encrypted alerts are stored in the database for later use. When connection reset is needed, only simple alert transmission occurs without intensive cryptographic operations, significantly reducing power consumption during actual reset operations while maintaining the same security level
3Reliability
If connections are re-established after failures or inactivity, then connection reliability is improved, but time and power consumption increase due to repeated cryptographic operations
Solution Approach 1:
The patent stores pre-computed encrypted alerts with future communication sequence numbers in a database. When connection reset is required after failure or inactivity, the system immediately retrieves and transmits the pre-computed alert without performing time-consuming cryptographic operations at that moment. This enables rapid reconnection while maintaining security, directly resolving the reconnection time issue
Solution Approach 2:
The system creates and stores copies of encrypted alerts in the database that can be reused for connection reset operations. Instead of regenerating cryptographic materials during each reconnection, the system uses pre-created alert copies, eliminating repeated cryptographic computations and significantly reducing reconnection time while maintaining the same security properties
Data Source
AI summary
A computer implemented method for managing a connection between a device and a server resource, the method comprising: establishing the connection between the device and a first server of the server resource; registering a connection identifier relating to the connection between the device and the first server in a first database entry of a database arrangement; pre-computing, at the first server, an encrypted alert for the device, the alert being provided with a pre-defined future communication sequence number; and transmitting the alert from the first server to the database arrangement for storage in association with the first database entry of the database arrangement.