Distributed key-based encryption system

• US 9,049,008 B2
• Filed: 06/25/2012
• Issued: 06/02/2015
• Est. Priority Date: 05/04/2012
• Status: Active Grant

• Current Assignee: National Tsing Hua University
• Original Assignee: National Tsing Hua University
• Inventors: Chou, Pai-Hsiang, Wang, An-Ping, Chang, Shin-Yi, Lee, Cheng-Dao, Lee, Chi-Yuan
• Primary Examiner(s): Vostal, O. C.
• Application Number:
  US13/532,510
• Publication Number:
  US 20130294604A1
• Time in Patent Office: 1,072 Days
• Field of Search: 380/278
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]

Abstract

A distributed key-based encryption system comprises a sending side and a receiving side. The sending side comprises a key-data generation unit, an encryption unit, a first wireless-transfer unit, and a second wireless-transfer unit. The receiving side comprises a third wireless-transfer unit, a fourth wireless-transfer unit, and a decryption unit. The communication between the second wireless-transfer unit and the fourth wireless-transfer unit is directional.

Claims

1. A distributed key-based encryption system adapted for wireless sensor network;

the distributed key-based encryption system comprising a sending side and a receiving side, wherein;

the sending side comprises;

a key-data generation unit generating at least one key data;

an encryption unit generating an encryption data according to a data and the key data;

a first wireless-transfer unit, which is coupled to the encryption unit and transfers one of the encryption data and the key data; and

a second wireless-transfer unit, which is coupled to the encryption unit and transfers the other one of the encryption data and the key data; and

the receiving side comprises;

a third wireless-transfer unit receiving one of the encryption data and the key data transferred by the first wireless-transfer unit;

a fourth wireless-transfer unit receiving the other one of the encryption data and the key data transferred by the first wireless-transfer unit; and

a decryption unit, which is coupled to the third wireless-transfer unit and the fourth wireless-transfer unit, and decrypts and reproduces the encryption data into the data according to the encryption data and the key data,

wherein a data length of the key data corresponds to a data length of the data;

communication between the second wireless-transfer unit and the fourth wireless-transfer unit is directional.

2. The system according to claim 1, wherein when the number of the wireless-transfer units of the sending side is equal to N, the key-data generation unit generates N−

1 key data, wherein N is a positive integer greater than 2.

3. The system according to claim 2, wherein the encryption unit generates the encryption data according to the data and the key data utilizing an addition or subtraction operation without carry.

4. The system according to claim 2, wherein the first wireless-transfer unit communicates with the third wireless-transfer unit through radio-frequency signals;

and the second wireless-transfer unit communicates with the fourth wireless-transfer unit through optical signals.

5. The system according to claim 4, wherein the decryption unit reproduces the data according to the key data and the encryption data utilizing an addition or subtraction operation without carry.

6. A distributed key-based encrypt method adapted for wireless sensor network comprising:

generating at least one key data executed by a key-data generation unit;

generating an encryption data according to a data and the key data executed by an encryption unit;

transferring one of the encryption data and the key data through a first wireless-transfer unit;

transferring the other one of the encryption data and the key data through a second wireless-transfer unit;

receiving one of the encryption data and the key data through a third wireless-transfer unit;

receiving the other one of the encryption data and the key data through a fourth wireless-transfer unit;

decrypting and reproducing the encryption data into the data according to the encryption data and the key data executed by a decryption unit,

wherein a data length of the key data corresponds to a data length of the data;

communication between the second wireless-transfer unit and the fourth wireless-transfer unit is directional.

7. The method according to claim 6, wherein N−

1 key data are generated when the number of the wireless-transfer units of a sending side is equal to N, wherein N is a positive integer greater than 2.

8. The method according to claim 7, wherein the encryption data is a result obtained according to the data and the key data utilizing an addition or subtraction operation without carry.

9. The method according to claim 8, wherein communication between the second wireless-transfer unit and the fourth wireless-transfer unit is through optical signals.