Watchdog Key System for Unmanned Undersea Vehicle Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Unmanned undersea vehicles face challenges in securely storing and protecting classified and sensitive information from unauthorized access, as existing solutions do not adequately prevent access to encrypted data even when the vehicles are compromised.
Innovation Solution
A data security system incorporating a data pod with persistent storage for encrypted data and a watchdog key stored in volatile memory, which can be removed to prevent access, combined with a watchdog to detect tampering and ensure the key's irretrievability if the vehicle is captured.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Duration of action of stationary object
If encrypted data is stored on persistent storage in unmanned undersea vehicles, then data can be retained after power loss, but unauthorized access to the encrypted data remains possible if the vehicle is compromised
Solution Approach 1:
The patent extracts the decryption key from the system by storing it on a removable USB drive rather than in the vehicle's internal memory. This separation allows the encrypted data to remain on persistent storage while the key can be physically removed, preventing unauthorized access even if the vehicle is compromised.
Solution Approach 2:
The patent implements preliminary encryption of data before storage and preliminary establishment of key removal procedures. The data is encrypted using a key that is prepared in advance and stored externally, and the system is pre-configured to automatically detect tampering and render keys irretrievable, preventing unauthorized access before it can occur.
2Ease of operation
If a decryption key is stored in the vehicle's memory, then data can be decrypted when needed, but the key may be accessed by unauthorized personnel if the vehicle is compromised
Solution Approach 1:
The decryption key is extracted from the vehicle's internal memory and stored on a removable USB drive. This allows the key to be easily inserted for decryption operations while preventing unauthorized access, as the key can be removed at any time and the system can detect its absence.
Solution Approach 2:
The USB drive acts as an intermediary between the encrypted data and the decryption key. The key is not stored directly in the vehicle's memory but is transferred through the USB interface, allowing controlled access while maintaining security through the ability to remove the key carrier.
3Ease of operation
If the vehicle system is accessed to retrieve data, then authorized personnel can access encrypted information, but tampering detection and key protection become more complex
Solution Approach 1:
The system implements self-service tampering detection through watchdog timers and integrity checks that automatically monitor system state without requiring external verification. The watchdog timer automatically detects unauthorized access attempts and triggers key rendering procedures, simplifying the overall security architecture while maintaining robust protection.
Solution Approach 2:
The system performs preliminary integrity verification of the USB drive and key presence before allowing data decryption. Watchdog timers are pre-configured to monitor system state, and automatic key rendering procedures are established in advance, reducing the complexity of real-time security decisions while maintaining strong protection.
Data Source
AI summary
An underwater vehicle system includes a data security system. The data security system includes a data pod including persistent storage. The persistent storage stores encrypted data. The security system includes a watchdog. The watchdog includes at least one processor. The security system includes a watchdog key. The watchdog key is stored in volatile storage. The watchdog key is configured to be used to decrypt the encrypted data. The data security system is configured to remove the watchdog key from the underwater vehicle system, thereby preventing access to the encrypted data on the data pod.