UDP Packet Key Generation for Synchronization Gap Resolution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In real-time communication systems, especially those using UDP protocol, packet loss and reverse packet arrival order can cause synchronization gaps between the transmitting and receiving sides, leading to decryption failures in common key cryptosystems like AES CBC mode and SSL cryptographic communication.
Innovation Solution
A communication system where the encrypting apparatus generates and transmits a key using packet information, ensuring that both the packet information and encrypted plaintext data are sent in a single packet, allowing the decrypting apparatus to receive necessary information for decryption even in the presence of packet loss and order changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If UDP communication is used to improve communication speed and real-time characteristic, then communication speed is improved, but packet loss and reverse packet arrival order occur causing synchronization gap
Solution Approach 1:
The patent applies preliminary action by including the key generation information (IV and packet sequence number) directly in the transmitted packet before the actual encryption/decryption operation. This ensures that the receiving side has all necessary information to generate the correct key in advance, preventing synchronization gaps even when packets are lost or arrive out of order.
Solution Approach 2:
The patent uses packet information (IV and sequence number) as an intermediary element that mediates between the transmission and reception sides. This intermediary data enables both sides to synchronize their key generation without requiring direct key exchange or complex error correction mechanisms, thus maintaining reliability while preserving high-speed UDP communication.
2Reliability
If key and packet information are transmitted separately, then security is improved, but synchronization gap increases when packet loss occurs
Solution Approach 1:
The patent merges the key generation information (IV and packet sequence number) with the encrypted packet data into a single transmission unit. This combination allows the receiving side to obtain both the encrypted data and the necessary key generation parameters simultaneously, eliminating synchronization gaps while maintaining security through proper encryption of the packet payload.
Solution Approach 2:
The transmitted packet serves multiple functions: it carries the encrypted payload data, includes the IV for key generation, and contains the packet sequence number for synchronization. This multi-functionality reduces the need for separate key transmission and minimizes the impact of packet loss on synchronization.
3Reliability
If packet information is included in each packet, then synchronization is improved, but device complexity increases
Solution Approach 1:
The patent applies local quality by adding only the necessary synchronization information (IV and sequence number) to the packet header or metadata, while keeping the main payload encryption intact. This localized approach to information inclusion provides the needed synchronization data without unnecessarily complicating the entire packet structure or increasing processing overhead.
Data Source
AI summary
A decrypting apparatus for decrypting cryptography data included in a packet includes a receiver, a key generator, and a decrypting section. The receiver receives a packet transmitted from an encrypting apparatus that executes an encrypting process. The key generator generates a key used for the encrypting process. The decrypting section decrypts cryptography data included in the packet received by the receiver with using the key generated by the key generator. In the decrypting apparatus, the packet received by the receiver includes packet information used for generating the key. The key generator generates the key with using the packet information.