Network Security via Wheat and Chaff Packet Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security systems require encryption for secure communications, which consumes processing capacity, memory, and causes delays, and are vulnerable to rogue systems intercepting clear text communications without encryption.
Innovation Solution
A security system that uses wheat and chaff packets, where only authorized systems can identify and validate signatures to distinguish between legitimate and imitation packets, allowing secure communication without encryption, using pre-shared keys and algorithms to create message authentication codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is used for secure communications, then security against rogue systems is improved, but processing capacity, memory usage, and communication speed deteriorate
Solution Approach 1:
The communication packets are divided into two types: wheat packets (legitimate communication data) and chaff packets (dummy data with invalid signatures). This segmentation allows the system to maintain security without encrypting all packets, as only wheat packets contain actual communication content while chaff packets provide security through their presence and invalid signatures that rogue systems cannot validate.
Solution Approach 2:
A signature validation mechanism acts as an intermediary between the sending and receiving systems. Each packet includes a signature that the receiving system validates using pre-shared keys and algorithms. This intermediary validation process provides security without requiring full encryption of packet contents, thereby maintaining communication speed while preventing rogue systems from accessing legitimate communications.
2Reliability
If encryption is used for secure communications, then security against rogue systems is improved, but processing capacity and memory requirements worsen
Solution Approach 1:
By segmenting packets into wheat and chaff types, the system avoids the computational overhead of encrypting all communication data. Only signature generation and validation operations are performed, which are significantly less resource-intensive than full packet encryption, thereby reducing processing capacity and memory requirements while maintaining security.
Solution Approach 2:
The signature validation mechanism serves as a lightweight intermediary that provides security verification without the heavy computational burden of encryption. The pre-shared keys and algorithms enable efficient signature validation that consumes minimal processing capacity and memory compared to traditional encryption methods.
3Productivity
If clear text communication is used without encryption, then processing speed is improved, but vulnerability to rogue system interception worsens
Solution Approach 1:
The communication stream is segmented into wheat packets (legitimate) and chaff packets (dummy). This segmentation allows clear text transmission of wheat packets for high speed while chaff packets with invalid signatures provide security by preventing rogue systems from successfully intercepting and understanding legitimate communications, as they cannot distinguish wheat from chaff without valid signatures.
Solution Approach 2:
The system changes the parameter of packet authentication from encrypted content verification to signature validation. By attaching signatures to packets and validating them using pre-shared keys, the system enables clear text transmission while maintaining security through signature verification, thus achieving both high speed and protection against rogue system interception.
Data Source
AI summary
A security system that provides for secure communication between systems on a network without the need for encrypting the packets related to the communication, and thus, provides secure communications over the network without the processing capacity, memory, and/or processing delays caused by encryption of the packets. The disclosure aids in preventing rogue systems from being able to read communications over the network without the need for encryption. The packets for the communications are sent over the network in clear text, which are readable by any systems on the network, however, only the systems that are authorized are able to determine what packets are the correct packets and what packets are the imitation packets.