Reduced Bandwidth TLS Handshake for IoT Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Machine-to-machine (M2M) communication in IoT environments faces challenges in securing data transmission due to the large amount of data required for TLS/DTLS handshakes, which is resource-intensive for constrained devices with limited bandwidth and power.
Innovation Solution
The proposed method reduces data exchange during TLS/DTLS handshakes by using a uniform resource identifier (URI) for digital certificates and fingerprint data instead of full certificates, and eliminates the need to transmit lists of algorithms/cipher suites, optimizing the handshake process for low-power devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TLS/DTLS protocol is used to secure M2M communication, then security is improved, but data transmission bandwidth is consumed excessively
Solution Approach 1:
The patent extracts only the essential elements needed for secure communication (fingerprint data and URI) from the complete TLS/DTLS handshake process. Instead of transmitting full digital certificates and complete algorithm lists, the invention transmits only the minimal necessary data elements, thereby reducing bandwidth consumption while preserving security functionality.
Solution Approach 2:
The patent changes the parameters of data transmission by replacing full certificates with fingerprint hashes and replacing complete algorithm suite lists with selective identifiers. This parameter transformation reduces the data volume from kilobytes to bytes while maintaining the security verification capability.
2Reliability
If full digital certificates are transmitted during handshake, then authentication reliability is improved, but bandwidth consumption increases
Solution Approach 1:
The patent creates a simplified copy (fingerprint) of the full digital certificate for transmission purposes. The fingerprint is a hash representation that uniquely identifies the original certificate, allowing verification without transmitting the complete certificate data. This copying approach maintains authentication reliability while dramatically reducing data size.
3Adaptability or versatility
If complete algorithm lists are exchanged during handshake, then compatibility is improved, but energy consumption increases
Solution Approach 1:
The patent extracts only the necessary algorithm identifiers from complete algorithm lists. Instead of exchanging comprehensive lists of supported algorithms, the invention transmits only the specific algorithm identifiers needed for the current communication session, reducing energy consumption while maintaining compatibility.
Data Source
AI summary
Broadly speaking, embodiments of the present technique provide methods, apparatuses and systems for performing a TLS/DTLS handshake process between machines in a manner that reduces the amount of data sent during the handshake process.