Secure Group Communication in Device Clusters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication networks among devices such as solar inverters and wind turbines face security challenges due to unreliable node availability and lack of mechanisms to prevent unauthorized access in multicast communication.
Innovation Solution
A method for secure multicast communication is implemented by generating and distributing a group encryption key among nodes, using public-private key pairs and tamper-proof apparatuses, ensuring confidentiality and authenticity through a secure transmission channel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multicast communication is implemented among network nodes, then information exchange efficiency is improved, but communication security deteriorates due to lack of access control
Solution Approach 1:
The patent introduces a key distribution device as an intermediary that manages group encryption keys. This mediator establishes secure communication channels between the key distribution device and each node using public-private key pairs, then distributes group keys through these secured channels. This resolves the contradiction by enabling efficient multicast communication while preventing unauthorized access through the intermediary's key management.
Solution Approach 2:
The patent implements preliminary authentication and key distribution before multicast communication begins. Nodes authenticate themselves to the key distribution device beforehand, receiving group encryption keys through secure channels. This preliminary action ensures that only authorized nodes can participate in multicast communication, preventing unauthorized access while maintaining communication efficiency.
2Device complexity
If nodes are designed to be lightweight and simple, then device complexity is reduced, but reliability deteriorates due to node failures
Solution Approach 1:
The patent merges the key management functionality into a centralized key distribution device, allowing individual nodes to remain simple and lightweight. Nodes don't need complex key management capabilities themselves; instead, they rely on the centralized device to manage group keys. This combining approach maintains node simplicity while improving overall system reliability through centralized key management.
Solution Approach 2:
The key distribution device acts as an intermediary that handles the complexity of key management, allowing simple nodes to participate in secure communication. The intermediary absorbs the computational and managerial burden, enabling lightweight nodes to maintain reliability without increasing their own complexity.
3Object-affected harmful factors
If secure communication channels are established using public-private key pairs, then communication security is improved, but computational overhead increases
Solution Approach 1:
The patent performs preliminary key establishment and authentication before multicast communication. Public-private key pairs are used once to establish secure channels and distribute group encryption keys. After this preliminary action, nodes can communicate using the lighter-weight symmetric group keys, reducing ongoing computational overhead while maintaining security.
Solution Approach 2:
The patent segments the cryptographic operations into two phases: an initial phase using computationally intensive public-private key cryptography for authentication and key distribution, and a subsequent phase using efficient symmetric encryption for actual multicast communication. This segmentation allows strong security where needed while minimizing computational overhead during regular operation.
Data Source
AI summary
The method is aimed at providing secure multicast communication between a plurality of devices forming a cluster of devices connected to one another by a local network. The method provides for electing a key distribution device and generating a group encryption key in said key distribution device. A secure communication channel is then established between the key distribution device and each device of a group of devices to be connected to the cluster. The group encryption key is transmitted from the key distribution device to the devices to be connected to the cluster and stored thereby. When all devices of the cluster have received the group encryption key, multicast communication among the devices of the cluster can start.