Sensor Communication Key Exchange for Trusted Data Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems between sensors and devices are vulnerable to data integrity issues, leading to incorrect decisions and potential damages due to fraudulent or incorrect sensor input.
Innovation Solution
Implementing a shared encryption key between sensors and devices to verify data integrity, using methods such as Near Field Communication (NFC) and keyed-hash message authentication code (HMAC) to ensure that sensor data is authentic and accurate.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensor data is transmitted without encryption, then communication is simple and fast, but data integrity cannot be verified and fraudulent data can be accepted
Solution Approach 1:
The patent applies preliminary action by establishing a shared encryption key between the sensor and device before data transmission occurs. The key is pre-configured through a key management system, enabling the sensor to encrypt data before sending it to the device. This preliminary key setup ensures that when data is transmitted, integrity verification can immediately proceed without requiring complex real-time key exchange protocols.
Solution Approach 2:
The patent introduces an intermediary key management system that facilitates secure communication between the sensor and device. This intermediary component handles the complex key distribution and management tasks, allowing the sensor and device to focus on data transmission while maintaining security. The key management system acts as a mediator that establishes trust without requiring the sensor and device to directly manage cryptographic complexity.
2Reliability
If a shared encryption key is implemented, then data integrity is verified, but communication setup becomes more complex
Solution Approach 1:
The patent applies self-service by enabling the sensor to generate and transmit its own identification data and encryption key to the device autonomously. The sensor independently performs the key generation and inclusion in identification data, eliminating the need for manual key configuration or complex setup procedures. This self-service approach simplifies deployment while maintaining security.
Solution Approach 2:
The patent implements universality by creating a multi-functional identification data structure that combines device identification, sensor identification, and encryption keys into a single integrated data package. This universal format allows the same data structure to serve multiple purposes: authentication, key exchange, and data integrity verification, thereby simplifying the overall system deployment without requiring separate mechanisms for each function.
3Reliability
If sensor data is not verified, then processing is fast and simple, but incorrect decisions may be made based on fraudulent data
Solution Approach 1:
The patent applies the skipping principle by implementing efficient cryptographic verification methods that quickly validate data integrity without significant processing delay. The HMAC verification and encryption operations are designed to be computationally lightweight, allowing the system to rapidly verify data authenticity before processing. This enables the system to skip potentially fraudulent data quickly while maintaining high processing throughput for valid data.
Data Source
AI summary
The present disclosure relates to a method, implemented by a sensor e.g. being used in a Recreational Vehicle monitoring and control system, for securing communication between the sensor and a device which is separate and distinct from the sensor. The method comprises receiving, from a control device, an identifier of the sensor and a request for an address of the sensor and a key for the sensor. The identifier of the sensor is to be related to the address and the key for the sensor. The method further comprises generating the key for the sensor. The generated key is to be used for verifying data integrity of sensor data transmitted from the sensor. Thereafter, the method comprises transmitting, to the control device, a message comprising the address and the generated key for the sensor.