Sensor Data Aggregation and Signing for Measurement Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing sensor devices face challenges in protecting the integrity and authenticity of measurement data due to limited computing resources, making them vulnerable to forgery, which is critical in industrial processes where environmental compliance and controlled substance handling are concerned.
Innovation Solution
A method that computes aggregate values of measurement data using a predetermined aggregation function and generates a signature only when a predetermined condition is met, reducing computational expense by aggregating multiple values before signing, and shifting the burden of authentication to a device that can verify the signature using the same or corresponding key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic operations are performed on every measurement data point to ensure integrity, then data authenticity is protected, but computing resource consumption increases significantly
Solution Approach 1:
Multiple individual measurement data points are merged into a single aggregate value through aggregation functions (e.g., hashing, summation, averaging). This combining approach reduces the number of cryptographic operations from one per data point to one per aggregate, significantly lowering computing resource consumption while maintaining integrity protection across all underlying data points.
Solution Approach 2:
Aggregation operations are performed preliminarily on measurement data before cryptographic signing. By pre-processing data into aggregate values, the system prepares consolidated data structures that require fewer cryptographic operations, thus reducing the computational burden on resource-constrained sensor devices while ensuring integrity of the original data points.
2Reliability
If cryptographic signing is performed on every measurement data point, then data integrity is ensured, but processing time increases
Solution Approach 1:
Multiple measurement data points are combined into aggregate values, reducing the total number of cryptographic signing operations required. This merging strategy maintains integrity verification for all underlying data points while significantly reducing the time consumed by cryptographic operations.
Solution Approach 2:
Data aggregation is performed as a preliminary step before cryptographic signing. This pre-processing consolidates multiple data points into single aggregate values, allowing subsequent cryptographic operations to be performed fewer times, thus reducing overall processing time while maintaining security.
3Use of energy by moving object
If aggregation functions are used to reduce computational load, then computing resources are conserved, but the complexity of the authentication system increases
Solution Approach 1:
Aggregation functions serve as intermediary components between raw measurement data and cryptographic signing operations. These intermediaries transform multiple data points into consolidated aggregate values, simplifying the cryptographic processing required while maintaining integrity. The intermediary layer manages the complexity by providing a structured approach to data consolidation before authentication.
Solution Approach 2:
The authentication system is segmented into distinct functional layers: data collection, aggregation, and cryptographic signing. This segmentation allows each component to be optimized independently - aggregation functions handle data consolidation efficiently, while cryptographic operations focus solely on securing the aggregated values, reducing overall system complexity through modular design.
Data Source
AI summary
A method for protecting the integrity of measurement data acquired by a sensor includes: in response to the measurement data being acquired, determining, by the sensor, whether an aggregate value has already been generated, and: if the aggregate value has not yet been obtained, mapping, by a predetermined aggregation function that takes the measurement data as a mandatory argument and a previously generated aggregate value as an optional argument, the measurement data to the aggregate value; whereas if the aggregate value has already been obtained, mapping, by the predetermined aggregation function, the combination of the aggregate value and the measurement data to a new aggregate value; and in response to a predetermined condition being met, computing, using a secret key of the sensor, a signature of the aggregate value; and outputting the signature via a communication interface of the sensor, and/or storing the signature in a memory.