Underwater DTN Communications with PKDN Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional communication protocols like TCP/IP are unsuitable for underwater communications due to intermittent connectivity and delayed data transmissions, making secure and reliable network communications challenging for underwater vehicles.
Innovation Solution
A secure underwater communications system that employs identity-based cryptography and Delay and Disruption-Tolerant Networking (DTN) protocols, using store-carry-and-forward techniques and a Public-Key Distribution Network (PKDN) to ensure secure data transmission by verifying the validity of network nodes and preventing data transmission to revoked nodes, ensuring secure and reliable data transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TCP/IP communication protocols are used for underwater communications, then reliable and secure network communications can be achieved in some situations, but the system becomes unsuitable for underwater environments with intermittent connectivity
Solution Approach 1:
The system performs preliminary actions by establishing store-carry-and-forward capabilities before communication interruptions occur. Data packets are stored in buffers at intermediate nodes during periods of connectivity, allowing transmission to resume automatically when connectivity is restored, without requiring retransmission protocols
Solution Approach 2:
The communication system dynamically adapts to changing connectivity conditions by switching between active transmission modes and storage modes. Intermediate nodes dynamically allocate buffer resources based on current network conditions, and data packets are dynamically routed through available paths in the underwater acoustic network
2Reliability
If cryptography key distribution techniques are used before data transmission, then secure communication can be achieved, but data transmission experiences significant delays in intermittent environments
Solution Approach 1:
Cryptography keys are distributed in advance through the PKDN before data transmission is needed. Intermediate nodes pre-establish security credentials and cryptographic materials, so that when data needs to be transmitted, the security framework is already in place and keys are readily available without requiring preliminary key exchange
Solution Approach 2:
A Public-Key Distribution Network (PKDN) acts as an intermediary system that manages cryptographic key distribution separately from the data transmission path. The PKDN provides security services including key generation, distribution, and revocation, allowing data to be transmitted without interrupting the flow for key exchange operations
3Reliability
If all hops within a point-to-point communications link must be active simultaneously, then secure transmission can be ensured, but communication fails in underwater environments where hops experience intermittent connectivity
Solution Approach 1:
The communication path is segmented into multiple independent store-carry-and-forward hops, where each segment can operate independently. Data packets are divided and routed through multiple intermediate nodes, with each node maintaining local buffers and security credentials, allowing the overall system to function even when individual segments experience interruptions
Solution Approach 2:
Intermediate nodes act as mediators that maintain data packets in buffers and manage security credentials locally. These intermediary nodes enable data to be forwarded through the network without requiring end-to-end simultaneous connectivity, with each node independently verifying security credentials and forwarding packets when conditions permit
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An underwater communications system includes a network communication interface, one or more computer processors, and a memory containing computer program code that, when executed by operation of the one or more computer processors, performs an operation. The operation includes storing a plurality of data packets to be transmitted to a destination device, determining that data communications over the network communication interface have become available for a first network node, and determining that the first network node has a valid security credential that has not been revoked by an access granting authority. Additionally, the operation includes, upon determining that the first network node has the valid security credential, transmitting the stored plurality of data packets over the network communication interface to the first network node. The first network node is configured to employ store-carry-and-forward data messaging techniques to transmit the plurality of data packets towards the destination device.