Cryptographic Flow Protocol for Decentralized Satellite Data Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Aerospace communication systems face security vulnerabilities from cyberattacks, supply chain attacks, and reliance on centralized infrastructure, leading to potential breaches in mission-critical systems and increased greenhouse gas emissions.

Innovation Solution

Implementing cryptographic flow-based security protocols using conflict-free replicated datasets and blockchain-based authority management to ensure secure, decentralized communication, reducing data replication and emissions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If centralized infrastructure and conventional encryption standards are used, then ease of operation is improved, but security reliability deteriorates due to vulnerabilities from cyberattacks and supply chain attacks

Engineering Contradiction:
Improveease of operationVSAvoidsecurity reliability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent segments the centralized cryptographic authority into distributed autonomous nodes across the aerospace network. Each node independently validates and stores cryptographic data, eliminating the single point of failure inherent in centralized systems. This segmentation allows the system to maintain operational simplicity through standardized protocols while achieving enhanced security through distributed architecture.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a blockchain-based intermediary layer that mediates between communication parties and cryptographic validation. This intermediary layer provides automated, trustless verification of cryptographic operations without requiring direct trust between participants, thereby improving security reliability while maintaining ease of operation through protocol standardization.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If data is replicated across multiple nodes for security, then security reliability is improved, but energy consumption increases due to redundant data transmission

Engineering Contradiction:
Improvesecurity reliabilityVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent changes the replication parameter from full data duplication to selective cryptographic hash replication. Instead of replicating entire datasets across all nodes, only essential cryptographic verification data (hashes, signatures, public keys) are replicated. This parameter change maintains security reliability through distributed verification while dramatically reducing energy consumption from data transmission.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent extracts only the essential cryptographic verification elements from complete datasets and replicates only those extracted components across the network. By taking out and replicating only the minimum necessary verification data rather than full datasets, the system achieves distributed security reliability while minimizing redundant transmission and associated energy consumption.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If decentralized cryptographic validation is implemented, then security reliability is improved, but device complexity increases due to distributed validation requirements

Engineering Contradiction:
Improvesecurity reliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements self-service through automated cryptographic validation where each node independently performs verification without requiring manual configuration or intervention. The distributed validation system automatically manages key pairs, validates signatures, and maintains cryptographic state, thereby achieving enhanced security reliability while keeping device complexity manageable through automation rather than manual processes.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent creates a universal cryptographic validation protocol that can be implemented across diverse aerospace devices with varying capabilities. The standardized protocol allows different devices to perform the same essential validation functions using their existing hardware and software resources, thereby achieving distributed security reliability without proportionally increasing device complexity through specialized components.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS20260095320A1A cryptographic flow-based security protocol for aerospace communication
Publication Date: 2026.04.02 SPIDEROAK INC
  • US20260095320A1 patent drawing
  • US20260095320A1 patent drawing
  • US20260095320A1 patent drawing

AI summary

A satellite receives, from a ground station, multiple first commands out-or-order for replicating a conflict-free replicated dataset at the satellite. An authority to access the conflict-free replicated dataset is retrievable from a block of a blockchain. The multiple first commands are reordered based on an ordering specified by a causal tree received from the ground station. A global state of the conflict-free replicated dataset is replicated locally at the satellite based on the multiple first commands reordered in accordance with the causal tree. From the ground station, multiple second commands are received for performing operations on the conflict-free replicated dataset. The operations are performed on the conflict-free replicated dataset, using the multiple second commands, based on the authority retrieved from the blockchain.