Server-Mediated PKI Communications for Low-Power M2M Modules
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing M2M communication systems face challenges in conserving battery life, managing radio-frequency spectrum resources, securing data transmission, and supporting diverse module manufacturers, particularly in wireless networks with intermediate firewalls, while efficiently transitioning between sleep and active states.
Innovation Solution
A server-based system using public key infrastructure (PKI) and cryptographic algorithms facilitates secure and efficient communication between modules and applications, enabling key derivation and translation between different cryptographic methods, and supporting multiple public/private key pairs for diverse modules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If M2M modules use wireless communications with intermediate firewalls, then data transmission security is improved, but communication efficiency and battery life are worsened due to frequent connection establishment and teardown
Solution Approach 1:
The system performs preliminary key exchange and secure tunnel establishment during module initialization, caching cryptographic keys and connection parameters locally. This preliminary action eliminates the need for repeated connection establishment and teardown during normal operation, resolving the contradiction between security maintenance and communication efficiency.
Solution Approach 2:
The patent introduces a server-based intermediary that manages PKI certificate validation and key distribution. The server acts as a mediator between modules and firewalls, handling security protocols centrally and reducing the computational burden on modules while maintaining secure communication through intermediate firewalls.
2Use of energy by moving object
If M2M modules operate in sleep mode to conserve battery life, then energy consumption is reduced, but response time and communication reliability are worsened
Solution Approach 1:
The system implements periodic wake-up cycles where modules transition between sleep and active states at optimized intervals. During sleep mode, modules consume minimal power; upon waking, they quickly establish secure connections and transmit data. This periodic action balances energy conservation with timely response requirements.
Solution Approach 2:
Modules perform preliminary authentication and key derivation during brief wake-up periods before full data transmission begins. By completing security handshakes in advance during partial wake-up cycles, the system minimizes total awake time while ensuring communication reliability, thus reducing overall energy consumption.
3Adaptability or versatility
If the system supports multiple cryptographic algorithms for diverse modules, then adaptability is improved, but system complexity and processing overhead are worsened
Solution Approach 1:
The patent implements a universal cryptographic framework where a single server-based PKI system supports multiple cryptographic algorithms and module types. The server handles algorithm translation and key management, allowing modules with different cryptographic capabilities to interoperate without each module implementing all possible algorithms, thus reducing overall system complexity while maintaining versatility.
Solution Approach 2:
The server acts as an intermediary that translates between different cryptographic algorithms. Modules use their native algorithms to communicate with the server, which then translates keys and ciphertext to compatible formats for other modules or applications, eliminating the need for each module to support every algorithm while maintaining broad compatibility.
4Ease of operation
If M2M modules frequently wake from sleep mode to check for data, then communication responsiveness is improved, but energy consumption and radio-frequency spectrum usage are worsened
Solution Approach 1:
Instead of continuous monitoring, the system uses optimized periodic wake-up cycles where modules briefly activate their radios and processors at predetermined intervals to check for incoming data. The period length is dynamically adjusted based on data transmission patterns, balancing responsiveness with energy and spectrum conservation during low-activity periods.
Data Source
AI summary
Methods and systems are provided for supporting efficient and secure “Machine-to-Machine” (M2M) communications using a module, a server, and an application. A module can communicate with the server by accessing the Internet, and the module can include a sensor and/or an actuator. The module, server, and application can utilize public key infrastructure (PKI) such as public keys and private keys. The module can internally derive pairs of private/public keys using cryptographic algorithms and a first set of parameters. A server can authenticate the submission of derived public keys and an associated module identity. The server can use a first server private key and a second set of parameters to (i) send module data to the application and (ii) receive module instructions from the application. The server can use a second server private key and the first set of parameters to communicate with the module.