Private Beacon Decryption in Mesh Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless mesh networks, the conventional method of decrypting and authenticating private beacons requires multiple AES-128 operations, leading to computational expense and increased power consumption, especially when the wrong subnet key is used.
Innovation Solution
A method where a mesh device decrypts a private beacon using a first encryption key, checks the validity of the initialization vector, and if invalid, uses a second key, reducing the number of AES operations to one by leveraging the low probability of generating a valid IV Index with a wrong key, with subsequent authentication acting as a safeguard.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the conventional method of decrypting and authenticating private beacons using multiple AES-128 operations is used, then security is maintained, but computational expense and power consumption increase
Solution Approach 1:
The patent segments the authentication process into two distinct phases: first decrypting only the IV index field to validate it, and then decrypting the full payload only if validation succeeds. This segmentation reduces the number of AES operations from 4*N to approximately 1 + P/N, significantly lowering power consumption while maintaining security through the two-stage verification process
Solution Approach 2:
The patent performs a preliminary action by decrypting and validating the IV index field before proceeding to decrypt the full payload. This preliminary validation step acts as a filter that prevents unnecessary full decryption operations, thereby reducing computational expense and power consumption while maintaining the security guarantee that only valid beacons undergo complete authentication
2Reliability
If the conventional method of trying multiple subnet keys is used, then correct authentication is achieved, but response time increases
Solution Approach 1:
The patent segments the key trial process into a quick IV index validation phase followed by a conditional full authentication phase. By decrypting only the critical IV index field first, the system can rapidly eliminate incorrect keys without performing the full 4*N AES operations, thus reducing response time while maintaining authentication accuracy through the subsequent full verification of valid beacons
Solution Approach 2:
The patent performs a preliminary validation of the IV index field before committing to full payload decryption. This preliminary action serves as a fast filter that quickly identifies valid beacons, reducing the overall response time by avoiding unnecessary full decryption attempts on invalid beacons while ensuring authentication accuracy through the mandatory full verification step
3Reliability
If full decryption is performed for every subnet key, then authentication is thorough, but computational complexity increases
Solution Approach 1:
The patent divides the decryption process into two segments: a lightweight IV index decryption that can be quickly validated, and a full payload decryption that is conditionally executed only after successful IV validation. This segmentation reduces computational complexity from O(N) full decryption operations to O(1) initial validation plus O(P/N) conditional full decryptions, making the system more efficient while maintaining thorough authentication for valid beacons
Solution Approach 2:
The patent performs a preliminary decryption and validation of the IV index field before proceeding to full payload decryption. This preliminary action simplifies the overall computational complexity by filtering out invalid beacons early, so that only potentially valid beacons undergo the more computationally intensive full authentication process, thereby maintaining thoroughness while reducing overall complexity
Data Source
AI summary
A mesh device for receiving and processing a private beacon message, which can be represented by one or more Bluetooth Low Energy mesh packets. Upon receiving the private beacon message, the mesh device decrypts a first portion of the private beacon by using a first encryption key corresponding to a first subnet, wherein the first portion comprises an initialization vector (IV), in the form of an index or other indicator. The decrypting using the first encryption key results in a first decrypted value for the IV index. The mesh device then determines whether the first decrypted value for the IV index is valid or invalid. If the mesh device determines the first decrypted value to be valid, the mesh device proceeds with authenticating the data contained in the private beacon message.