Two-Stage Encryption for Low-Power Field Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Field devices in industrial plants, especially those operating in low power modes due to energy constraints, are unable to perform complex homomorphic encryption, which is necessary for secure data transmission to the cloud.
Innovation Solution
A two-stage encryption method is employed, where field devices with limited computing power use non-homomorphic encryption to encrypt data, which is then transmitted to a more powerful instance for decryption and subsequent homomorphic encryption, allowing secure cloud processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If homomorphic encryption is used for secure cloud data processing, then data confidentiality is improved, but computing power requirements increase beyond field device capabilities
Solution Approach 1:
The encryption process is segmented into two distinct stages: first, a simplified non-homomorphic encryption is applied at the field device level for initial data protection; second, homomorphic encryption is applied at the cloud platform level for secure processing. This segmentation allows each component to perform only the encryption type it is capable of handling, resolving the contradiction between data confidentiality and computing power requirements.
Solution Approach 2:
The patent introduces an intermediary encryption layer that bridges the gap between field device capabilities and cloud processing requirements. The field device applies a lighter encryption method, and the cloud platform applies homomorphic encryption to the already-encrypted data, acting as an intermediary that enables secure cloud processing without requiring the field device to perform computationally intensive operations.
2Reliability
If homomorphic encryption is implemented at the field device, then secure cloud processing is enabled, but energy consumption exceeds available power resources
Solution Approach 1:
The encryption workload is segmented between the field device and cloud platform. The field device performs only the energy-efficient non-homomorphic encryption stage, while the energy-intensive homomorphic encryption is performed at the cloud platform. This segmentation ensures that the field device's energy consumption remains within its limited power budget while still achieving secure data transmission.
Solution Approach 2:
The cloud platform performs the homomorphic encryption operations on behalf of the field device, utilizing its own computing resources and energy supply. This self-service approach allows the field device to achieve secure cloud processing capabilities without bearing the energy burden of implementing full homomorphic encryption locally.
3Use of energy by moving object
If simple encryption is used by field devices, then energy consumption is reduced, but cloud processing capability is lost
Solution Approach 1:
The encryption capability is segmented across two levels: the field device implements simple encryption suitable for its energy constraints, while the cloud platform implements homomorphic encryption that enables advanced processing capabilities. This segmentation allows the system to achieve both low energy consumption at the device level and high cloud processing capability at the platform level.
Solution Approach 2:
The field device performs preliminary encryption of data before transmission to the cloud. This preliminary action protects the data during transmission and storage, enabling the cloud platform to subsequently apply homomorphic encryption and perform computations on the already-encrypted data, thus gaining full cloud processing capability without requiring the field device to handle complex encryption operations.
Data Source
AI summary
A method for encrypting data of a field device includes steps of generating data using the field device, encrypting the data by the field device using a non-homomorphic encryption method using a first key, transmitting the non-homomorphically encrypted data to a first instance, and storing the non-homomorphically encrypted data in the first instance. The method also includes retrieving part of the non-homomorphically encrypted data stored in the first instance by a second instance, and decrypting the retrieved, non-homomorphically encrypted data using the second instance the first key. Further, the data is encrypted by the second instance using a homomorphic encryption method using a second key, wherein the homomorphically encrypted data is transmitted to the first instance or to a third instance and stored.