Telecommunications Traffic Data Security via Size Decoupling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securing telecommunications traffic data do not adequately prevent unauthorized access or deduction of communication information, as service providers can infer communication relationships from message size and temporal correlations despite encryption.
Innovation Solution
A method and system that involve generating a second message with a unique size unrelated to the first message, and introducing a time delay between message receipt and notification, ensuring that only the intended recipient can decrypt the information, thereby preventing correlation and unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If message sizes are preserved in transmission, then data integrity is maintained, but communication relationships can be deduced by observing size correlations
Solution Approach 1:
The patent extracts and removes the message size information from the transmission process by introducing padding data. The actual message content is separated from its size characteristic, which is then replaced with randomized padding to prevent size-based correlation analysis while preserving the complete message for the recipient
Solution Approach 2:
Padding data acts as an intermediary element between the actual message and the transmission channel. This intermediary layer masks the true message size, preventing observers from deducing communication relationships while allowing the recipient to extract the original message using knowledge of the padding scheme
2Productivity
If notifications are sent immediately upon message receipt, then communication efficiency is improved, but temporal correlations reveal sender-recipient relationships
Solution Approach 1:
The system performs preliminary actions by pre-generating padding data and establishing notification delay parameters before actual message transmission occurs. This preparation enables the system to decouple notification timing from message receipt timing, preventing temporal correlation analysis while maintaining efficient communication flow
Solution Approach 2:
The notification system transitions from a static immediate-response model to a dynamic delayed-notification model. The notification is sent after a randomized delay period, making the timing relationship between message receipt and notification unpredictable, thereby preventing temporal correlation attacks while preserving communication efficiency
3Reliability
If encryption keys are stored in secured environment, then unauthorized access to payload is prevented, but traffic data analysis can still reveal communication patterns
Solution Approach 1:
The patent applies different quality characteristics to different parts of the data transmission system. The payload receives strong encryption protection in the secured environment, while the traffic metadata (sizes, timings) receives anonymization treatment through padding and delay mechanisms. This local differentiation addresses both security needs without compromising either aspect
Data Source
AI summary
A method and system are provided for securing telecommunications traffic data. A method is provided for transmitting messages via a telecommunications network between a number of subscribers by means of a telecommunications service, wherein the telecommunications service receives at least one first message of individual first size from at least one first subscriber to the telecommunications service that is intended for at least one second subscriber of the telecommunications service. In reaction to receiving a message, the telecommunications service sends at least one second message to the at least one second subscriber, wherein the at least one second message obtains a second size. The first size cannot be conclusively deduced from the second size.