Publicly Verifiable Symmetric Cryptography for IoT
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic techniques for secure communication are computationally burdensome, making it difficult for low-power, low-computational capacity devices like IoT devices to implement rigorous cryptographic security methods.
Innovation Solution
The development of publicly verifiable symmetric cryptography methods that utilize homomorphic private and public keys, allowing for secure authentication and privacy tasks to be computed efficiently on resource-constrained devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing cryptographic techniques are used for secure communication, then security reliability is improved, but computational burden and power consumption increase
Solution Approach 1:
The patent divides the cryptographic computation into two distinct parts: lightweight symmetric encryption operations performed on resource-constrained IoT devices, and computationally intensive homomorphic evaluation performed on powerful cloud servers. This segmentation allows each component to operate in its optimal environment, with the IoT device only performing minimal local computation while the cloud handles the heavy cryptographic lifting.
Solution Approach 2:
The patent introduces a cloud server as an intermediary that receives encrypted data from IoT devices, performs the computationally burdensome homomorphic evaluation, and returns results to the devices. This intermediary absorbs the computational burden that would otherwise exhaust the limited resources of IoT devices, enabling secure communication without requiring high local computational power.
2Reliability
If existing cryptographic techniques are used for secure communication, then security reliability is improved, but computational capacity requirements increase
Solution Approach 1:
The patent segments the computational workload by implementing symmetric encryption algorithms (like AES) on IoT devices that require only basic computational capabilities, while delegating complex homomorphic evaluation operations to cloud servers with high computational capacity. This allows IoT devices to maintain security without requiring sophisticated local processing power.
Solution Approach 2:
The patent uses encrypted copies of data and computations. Instead of processing plain text locally, the system encrypts data and performs computations on the encrypted copies using homomorphic encryption. This allows the IoT device to send encrypted data to the cloud, which processes copies of the data without revealing the actual content, thereby reducing local computational requirements while maintaining security.
3Productivity
If symmetric encryption is used for efficiency on low-resource devices, then computational efficiency is improved, but public verifiability and non-repudiation are lost
Solution Approach 1:
The patent merges symmetric encryption with homomorphic encryption in a hybrid system. The symmetric encryption component provides computational efficiency and privacy for data at rest and during transmission on IoT devices, while the homomorphic encryption component adds public verifiability and non-repudiation capabilities. By combining these two approaches, the system achieves both efficiency and verifiability that neither component could provide alone.
Solution Approach 2:
The patent creates a multi-functional cryptographic system where a single hybrid approach serves multiple purposes: symmetric encryption provides efficient privacy protection for resource-constrained devices, while homomorphic encryption enables public verification and non-repudiation. This universal solution allows the same system to address both computational efficiency requirements and security verification requirements simultaneously.
Data Source
AI summary
A method for publicly verifiable symmetric cryptography is disclosed. The method includes: obtaining an initial encrypted key and a homomorphic public key; obtaining a first message and an initial signature; calculating an initial hashed value of the first message; setting a cryptographic function of the initial hashed value of the first message and an initial private key; generating an evaluated value based on the cryptographic function, the homomorphic public key, the initial encrypted key, and the initial hashed value of the first message; and transmitting, at the verifier, a verification result based on a hashed value of the initial signature and the evaluated value. Other aspects, embodiments, and features are also claimed and described.


