Secure Communication Equipment Using Processor-Based Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication equipment with distributed functionality across separate devices interconnected via a short-range data link faces challenges in securing both long-range and short-range radio connections, particularly in preventing denial-of-service attacks and ensuring interoperability between devices from different vendors, as current solutions require replacing transceivers to change cryptographic algorithms.
Innovation Solution
A user interface device with a processor that combines and encrypts digital event data with audio data streams using cryptographic control data, allowing support for various cryptographic algorithms without needing transceivers that support specific algorithms, and a communication device that decrypts and separates the encrypted streams to control operations, enabling flexible configuration and interoperability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If transceivers supporting cryptographic algorithms are used to encrypt the data stream, then security against eavesdropping and DoS attacks is improved, but device complexity and interoperability challenges increase due to the need to replace transceivers when changing algorithms
Solution Approach 1:
The patent separates the encryption function from the transceiver hardware. The transceiver handles only transmission, while a separate processing unit (CPU or microcontroller) performs encryption/decryption operations. This segmentation allows the encryption algorithm to be changed independently of the transceiver, eliminating the need to replace transceivers when changing cryptographic algorithms.
Solution Approach 2:
The processing unit is designed to support multiple cryptographic algorithms (e.g., AES, DES, RC4) through software configuration rather than hardware-specific implementation. This universal approach allows the same transceiver and processing unit to work with different encryption algorithms, improving interoperability between devices from different vendors.
2Reliability
If the entire data stream is encrypted, then security is improved, but processing complexity and computational requirements increase
Solution Approach 1:
The patent applies encryption selectively to specific portions of the data stream rather than uniformly encrypting everything. Audio data and event data are handled differently, with encryption applied at appropriate points in the processing chain. This localized approach reduces unnecessary computational overhead while maintaining security where required.
Solution Approach 2:
The patent performs encryption operations at specific stages in the data processing chain - encrypting audio data before transmission and encrypting event data before combining it with the audio stream. This preliminary encryption approach ensures security is implemented at the most efficient points, reducing the need for complex real-time processing of already-encrypted data.
Data Source
Figure 1
Figure 2a~2b
Figure 3
AI summary
Communication equipment comprises a communication device (112) and a user interface device (101), e.g. a remote speaker-microphone, interconnected via a short-range data link. The user interface device comprises a user interface (102) for receiving commands from a user. The user interface device comprises a processor (104) for generating event data in accordance with the commands and for combining the event data with a digital data stream whose information is to be transmitted. The processor encrypts the result in accordance with cryptographic control data accessible to the processor. The encrypted digital data stream is de- livered to a transceiver of the user interface device in order to transmit it to the communication device. As the encryption is carried out by the processor in accordance with the cryptographic control data, the transceiver does not need provide cryptographic functionality and the communication equipment can flexibly support different cryptographic algorithms.