Login| Sign Up| Help| Contact|

Patent Searching and Data


Title:
SECURE WIRELESS COMMUNICATION TRANSCEIVER
Document Type and Number:
WIPO Patent Application WO/2011/123787
Kind Code:
A1
Abstract:
An efficient hybrid encryption-coding algorithm is disclosed that requires using traditional encryption only for the first small amount of data. This amount of data, the first block, is determined by the traditional encryption algorithm to be applied on this first block. In this algorithm, all of the rest of the information will then be transmitted securely over the wireless channel, using network coding, without a need for using traditional encryption. Unlike the traditional and opportunistic encryption algorithms, the algorithm achieves higher data rates and less avalanche error effect, and, at the same time, it is as secure as traditional encryption algorithms. Assuming the additive white Gaussian noise (AWGN) channel model employing our disclosed algorithm, we analyze its performance in terms of throughput and security level.

Inventors:
MATALGAH MUSTAFA MUHAMMAD (US)
ALMAQABLEH AMER MOHAMMAD (JO)
Application Number:
PCT/US2011/030952
Publication Date:
October 06, 2011
Filing Date:
April 01, 2011
Export Citation:
Click for automatic bibliography generation   Help
Assignee:
UNIV MISSISSIPPI (US)
MATALGAH MUSTAFA MUHAMMAD (US)
ALMAQABLEH AMER MOHAMMAD (JO)
International Classes:
H04K1/00
Foreign References:
US20050013277A12005-01-20
US20060269055A12006-11-30
US20020023209A12002-02-21
Attorney, Agent or Firm:
GUPTA, Hemant et al. (Snow O'Mara, Stevens & Cannada PLLC,Suite 500,6075 Poplar Avenu, Memphis TN, US)
Download PDF:
Claims:
CLAIMS:

We Claim:

1. A method for encryption of a finite sequence of bits comprising: a. Mapping the finite sequence of bits into one or more parallel plaintext data blocks, each with a common pre-specified block length; b. Encrypting the first plaintext data block using an encryption algorithm to create a first encrypted data block; c. With respect to each plaintext data block after the first plaintext data

block, performing a bitwise exclusive OR with the first plaintext data block to create a non-first encrypted data block; and d. Mapping the first encrypted data block and non-first encrypted data blocks back into a serial format in the same order in which they originally occurred in the finite sequence of bits to create an encrypted finite sequence of bits.

2. The method for encryption of Claim 1 further comprising: a. mapping the finite sequence of bits into one or more superframes of a pre- specified superframe length, before step "a," wherein steps "a" through "d" of Claim 1 are performed on each of the finite sequences of bits comprising the superframes to create encrypted superframes; and

1 b. mapping the encrypted superframes back into a serial format in the same order in which they originally occurred in the finite sequence of bits.

3. A method for decryption of an encrypted finite sequence of bits comprising: a. Mapping the encrypted finite sequence of bits into one or more parallel encrypted data blocks, each with a common pre-specified block length; b. Decrypting the first encrypted data block using the encryption algorithm used to encrypt it to create a first plaintext data block; c. With respect to each encrypted data block after the first encrypted data block, performing a bitwise exclusive OR with the first plaintext data block to create a non-first plaintext data block; and d. Mapping the first plaintext data block and the non-first plaintext data blocks back into a serial format in the same order in which they originally occurred in the encrypted finite sequence of bits.

4. The method for decryption of Claim 3 further comprising: a. mapping the encrypted finite sequence of bits into one or more encrypted superframes of a pre-specified superframe length before step "a," wherein steps "a" through "d" are performed on the encrypted finite sequence of bits comprising each of the encrypted superframes to create decrypted superframes; and

2 b. mapping the decrypted superframes back into a serial format in the same order in which they originally occurred in the encrypted finite sequence of bits.

5. A method for securely transmitting a communication comprising a finite sequence of bits comprising: a. Performing the method for encryption of Claim 1 on the finite sequence of bits; b. Modulating the resulting encrypted finite sequence of bits to create a

modulated encrypted finite sequence of bits; c. Transmitting the modulated encrypted finite sequence of bits to a receiver; d. Demodulating the received encrypted finite sequence of bits; and e. Performing the method of decryption of Claim 3 on the demodulated

encrypted finite sequence of bits.

6. A method for securely transmitting a communication comprising a finite sequence of bits comprising: a. Performing the method for encryption of Claim 2 on the finite sequence of bits; b. Modulating the resulting encrypted finite sequence of bits to create a

modulated encrypted finite sequence of bits;

3 c. Transmitting the modulated encrypted finite sequence of bits to a receiver; d. Demodulating the received encrypted finite sequence of bits; and e. Performing the method of decryption of Claim 4 on the demodulated

encrypted finite sequence of bits.

7. A transmitter for securely transmitting a communication which performs the

method of encryption of Claim 1.

8. A transmitter for securely transmitting a communication which performs the

method of encryption of Claim 2.

9. A receiver for decrypting a finite sequence of bits which performs the method of decryption of Claim 3.

10. A receiver for decrypting a finite sequence of bits which performs the method of decryption of Claim 4.

11. A system for securely transmitting a communication comprising the transmitter of Claim 7 and the receiver of Claim 9.

12. A system for securely transmitting a communication comprising the transmitter of Claim 8 and the receiver of Claim 10.

13. A method for reducing transmission overhead processing cycles in a secure

communication system comprising using the transmitter of Claim 7 and the receiver of Claim 9.

4

14. A method for reducing transmission overhead processing cycles in a secure communication system comprising using the transmitter of Claim 8 and the receiver of Claim 10.

15. A method for increasing transmission throughput in secure communication

systems comprising using the transmitter of Claim 7 and the receiver of Claim 9.

16. A method for increasing transmission throughput in secure communication

systems comprising using the transmitter of Claim 8 and the receiver of Claim 10.

17. A method for reducing the amount of error propagation (avalanche effect)

throughout the transmitted blocks over the wireless channel comprising using the transmitter of Claim 7 and the receiver of Claim 9.

18. A method for reducing the amount of error propagation (avalanche effect)

throughout the transmitted blocks over the wireless channel comprising using the transmitter of Claim 8 and the receiver of Claim 10.

5

Description:
SECURE WIRELESS COMMUNICATION TRANSCEIVER

INVENTORS: MUSTAFA M. MATALGAH

AMER M. ALMAQABLEH

CROSS-REFERENCES TO RELATED APPLICATIONS

[0001 ] This application claims the benefit of U.S. Provisional Application No. 61/320,245 filed April 1, 2010, which is incorporated herein by reference in entirety.

FIELD OF THE INVENTION

[0002] The present invention is generally directed toward a wireless communication transceiver. More specifically, it is directed toward a system and apparatus for a highly secure communication transmitter and receiver having higher performance in wireless communications.

BACKGROUND OF THE INVENTION

[0003] The wireless communication link in general is insecure and open to intruders. Hence, it is vulnerable to various types of attacks where an eavesdropper can easily intercept a communication signal, alter it, and forward it to the destination or resend it back to the source. Consequently, none of the confidentiality, integrity, or authenticity of the message is preserved while traversing the wireless medium. The last decade has witnessed a tremendous increase in the number of services offered over the Internet and in the development of standards for wireless packet service. Users are more likely to have their data cross a heterogeneous internetwork. With the already evolved personal communication systems (PCS) and the advancement in wireless access to multimedia data services, PCS customer demand for wireless content has been extremely increasing. Therefore, given the insecure nature of wireless links and the Internet, wireless network security based on encryption is needed to satisfy users demand for end- to-end confidential communications.

[0004] Relay-based cooperative wireless networks have been extensively studied in the literature in the past decade. However, one deficiency in transmitting the information signal over the wireless channels, in general, and through the relay nodes in cooperative networks, in particular, is the lack of information security while the signal is traversing the wireless channel or at the relay nodes. An intruder, anywhere in the transmission path or at the relay, can easily extract the signal and recover the data with no privacy considerations.

[0005] One way to overcome this deficiency is to encrypt the data before the transmission process. However, employing encryption in relay-based cooperative wireless communication results in multiple drawbacks. First, encryption requires an extra large amount of bandwidth because of the added overhead packets. Second, the performance deteriorates extensively due to the avalanche effect ([1] and [2]) in wireless fading channels, which tremendously reduces the effective bandwidth utilization. This is in addition to the delay caused by the processing time required by the encryption and decryption algorithms at the source and destination sides, respectively. All of these drawbacks result in a large reduction in the achievable throughput. Moreover, performance deterioration, due to fades in wireless multipath fading channels, may in some extreme conditions make it almost impossible to decrypt the data at the destination side due to the avalanche effect inherited in traditional encryption algorithms. For example, and without loss of generality, in order to achieve privacy and secure communication, the transmitted data should be encrypted before transmission. The encrypted data (cipher data) can, then, be decoded at the relay side without extracting the original information (plaintext) and forwarded to the destination side. Although cryptography of the plaintext achieves security and privacy, it reduces the total throughput [2] and increases the amount of overhead bits [3]. These drawbacks motivate researchers to investigate other methods to develop effective algorithms to securely transmit information over the cooperative nodes in wireless communication. There exists a need for an encryption algorithm that is efficient for wireless communication systems.

SUMMARY OF THE INVENTION

[0006] We disclose a hybrid encryption-network coding mechanism that minimizes the number of steps that need traditional encryption to tremendously reduce the drawbacks stated herein and to use network coding that does not suffer from performance deterioration in wireless channels as compared to traditional encryption algorithms. This work will result in a new secured communication system with high performance. Our encryption algorithm is efficient for wireless communication systems, which requires only encrypting (using traditional encryption algorithms) the first block of each frame (or superframe) of the data stream and transmits the remainder of the blocks utilizing network coding theory. This amount of data (the first block length), as well as the encryption frequency (encryption rate or the ratio of the first encrypted block-length to the length of the whole frame or superframe) is determined by the adopted traditional encryption algorithm. The size of the first encrypted block, which may vary based on the adopted encryption algorithm, is chosen according to the encryption algorithm and the key size. For example, the key size in the advance encryption standards (AES) algorithm may vary from 128, 192, and 256 bits, while the key size for the standard data encryption standard (DES) is 64 bits. Our disclosed hybrid encryption-coding algorithm is simple and achieves a pre-defined security level for the whole data frame with improved throughput and reduced overhead processing cycles. We employ a wireless channel model using this algorithm and analyze its performance in terms of overhead, security level, and system throughput. Our system achieves a predefined security level for the whole data frame with improved system throughput and reduced overhead processing cycles. At the destination end, an optimal ratio combining scheme is employed to maximize the output combined signal-to-noise ratio (SNR) to achieve the best performance at the link level (bit error probability and outage probability).

BRIEF DESCRIPTION OF THE DRAWINGS

[0007] Further advantages of the invention will become apparent by reference to the detailed description of preferred embodiments when considered in conjunction with the drawings:

[0008] FIG. 1 depicts a diagram showing a transmitter and receiver structure for the encrypted-coded mechanism in a wireless communication system.

[0009] FIG. 2 depicts a practical implementation block diagram for the proposed encrypted-coded transceiver in wireless communication systems.

[0010] FIG. 3 depicts an exemplary superframe structure. [0011 ] FIG. 4 is a graph showing a comparison between the amount of overhead processing cycles (PC) per superframe when encrypting/decrypting the superframe using the traditional AES algorithm and when using the hybrid encryption- coding algorithm at ? c = 20.

[0012] FIG. 5 is a graph showing the overhead reduction factors for both encryption and decryption processes versus the encryption ratio, β , for the encryption- coding algorithm.

[0013] FIG. 6 is a graph showing the normalized security level and normalized throughput versus the block length for different values of the encryption ratio, β ε at Ρ ε = 10 "2 and η = 0.85.

[0014] FIG. 7 is a graph showing the comparison between the normalized throughput of BPSK using the encryption-coding algorithm, traditional AES algorithm with fixed block length, the opportunistic encryption algorithm for η = 0.80, and different values of encryption ratio, β , in AWGN channel.

DETAILED DESCRIPTION

[0015] The following detailed description is presented to enable any person skilled in the art to make and use the invention. For purposes of explanation, specific details are set forth to provide a thorough understanding of the present invention. However, it will be apparent to one skilled in the art that these specific details are not required to practice the invention. Descriptions of specific applications are provided only as representative examples. Various modifications to the preferred embodiments will be readily apparent to one skilled in the art, and the general principles defined herein may be applied to other embodiments and applications without departing from the scope of the invention. The present invention is not intended to be limited to the embodiments shown, but is to be accorded the widest possible scope consistent with the principles and features disclosed herein.

[0016] We disclose the system and information signal model of our hybrid encryption-coding algorithm as follows. The source produces the information data message of a finite sequence as [mi, m 2 ,■■■ , m K ] that are independent and identically distributed random variables that take a finite set, M, with cardinality I Ml. We assume that the a priori probability of M (pfm , i = 1, 2, K) is known, and the entropy for M is defined as

H (M) = -∑ mi EM p(^i) logjj [P )]

[0017] The encryption of the data sequence M (plaintext) to generate the encrypted signal (ciphertext) C = i¾ [M] ? d oes nol; Ά ^ an y new information or change the entropy from the information theoretic viewpoint. The key used to generate the ciphertext, when using key encryption algorithms, should have an entropy of H (key) > H (M) to ensure secure communication. In addition, in keyless encryption algorithms, the entropy of the randomness parameter, instead of the key, should satisfy this condition, as well. Within this model, our novel hybrid encryption-coding algorithm achieves the same security level (among the whole encrypted-coded data) as the known traditional encryption algorithms and reduces the overhead processing cycles (PC), hence increasing the achievable system throughput. [0018] The traditional algorithm for message encryption to be used in encrypting the first block is the AES cipher algorithm (also known as the Rijndael algorithm), which is a known standard algorithm that is very immune to adversary attack by intruders, such as a brute force attacker. The encryption key is assumed to be known only to the destination node where the cipher message of the first block is received and decrypted to convey the plaintext. The AES cipher requires a 128 block size and a 128/192/256 key size that satisfies the entropy condition for the key size. The Rijndael algorithm supports many block sizes; however, the AES adopted the block size of 128 with different key lengths. The general design of the AES encryption algorithm has pre- round transformation (initial stage), R-rounds, key expansion, and a final stage. The number of rounds is determined by the key size. Particularly, the AES uses 10, 12, and 14 rounds for key sizes of 128, 192, and 256, respectively. The number of processing cycles for each operation (AND, OR, Exclusive OR (XOR), and SHIFT) varies based on the number of rounds included in the encryption algorithm as a result of different keys adopted. It should be recognized that the number of PC in the decryption is different than the number of PC used in encryption. In general, the number of PC is much larger in decryption compared to encryption.

[0019] Embodiment 1: Transmitter and Receiver Structures

[0020] Referring to the drawings, a conceptual structure for the transceiver of the disclosed hybrid encryption-coding mechanism is shown in FIG. 1. The transmitter structure is depicted in FIG. la, where the incoming serial data stream (S in bits) is mapped into parallel data blocks, each with a common pre- specified block length ( ¾. Our algorithm requires that the block length βι be determined by the encryption algorithm that will be applied only on the first block.

[0021 ] The first block undergoes a proper encryption algorithm satisfying a certain security level. The remaining blocks are arranged systematically and enter a bitwise XOR operation with the first block (before encryption, i.e., plaintext), as can be seen from the figure. Next, the data is mapped back into a serial format to be encoded before transmission (both source and channel encoding) to enhance transmission reliability. The data stream is then modulated using any digital modulation technique in order to be suitable for transmission. Without loss of generality, we consider the BPSK modulation technique to be studied in this paper, and the analysis can be generalized to any other modulation type or higher-order modulation. The receiver structure, as can be seen in FIG. lb, completely reverses all of the operations performed at the transmitter. Also, at the receiver side, only the first block is decrypted using the appropriate traditional decryption algorithm and the decryption key, whereas, all of the other blocks are also bitwise XORed with the first decrypted block (plaintext). As a result, all of the data frame is transmitted securely by performing traditional encryption only on the first small amount of data (B \ in FIG. 1) within a frame or superframe.

[0022] It should be appreciated that the operations performed by the bank of XOR gates along with the S/P and P/S blocks, in FIG. 1, can be practically implemented by a shift-register, one XOR gate, and a switch. However, we used the structure shown in the figure just to simplify the understanding of the concept. A practical implementation block diagram is shown in FIG. 2. [0023] The data sequences are composed of N superframes. Each superframe contains Np frames, and each frame consists of N b blocks, each of K = βι bits size, as can be seen in FIG. 3. The encryption algorithm, for the transceiver in FIG. 1, is detailed in the text structure as Algorithm 1 below, with notations following it. As can be seen by the steps in Algorithm 1, we first encrypt the first block, B 1 ; with a highly immune standard traditional encryption algorithm (such as the AES). Following this step, the rest of the N b -1 blocks will be used as plaintexts (i.e., will not undergo traditional encryption). In these steps that follow, a bit- wise XOR operation is performed between the plaintext of the first block with each of the remaining N b -1 blocks and then transmitted to the destination. Consequently, the first block will not be recovered without performing the decryption process, which is assumed to be very immune for cryptanalysis, and, therefore, the other blocks will not be detected by the intruders since the plaintext of the first block is required to undo the XOR operation. This latter operation can be performed only after decrypting the first block (B \ ) at the receiver (see FIG. l.b). By performing the disclosed encryption algorithm, following the steps provided in Algorithm 1 and generalized for relay-based cooperative wireless networks in Table 1, where the first block is first traditionally encrypted, and, then, the XOR operation is performed for the remaining blocks with the plaintext of the first block, the whole resultant data stream will then be secure with security level as high as the security level of the first block.

[0024] The whole data stream will share the same security level since the

XOR operation is a one-to-one mapping function, and the data will not be recovered by any intruder without breaking the first cipher. [0025] For this particular embodiment, our block size was 128 bits. However, any block size can be considered in this disclosed encryption algorithm. The encryption algorithm is repeated every one superframe, or multiple of superframes, with a new encryption key. The main reason for having this algorithm repeated every superframe (Np frames) is that using a new key for each superframe enhances security and reliability of the transmission.

Input: Data stream as plaintext

Output: Data stream as ciphertext

Divide the data sequence into N superframes;

foreach jV, ; superframe (SFi), i— 1 , · · , N, to be sent do =

= ¾ | Bi |

Generals; llie encrypled-coded frame.

end

Generate the cncryptcd-coded superframe. Repeat for other superframes;

Algorithm 1: Generating secure encrypted -cod ed data using the proposed encryption algorithm Algorithm Notations

B j : The j lh block of data (plaintext).

B. j : The j h block of the encrypted -coded d ata (ciphertext).

f¾ : block length.

NF : Number of frames within a superframe.

N h : Number of block within a frame.

¾ j : The i h bit of the j th block of the data (pl aintext).

hi j : The r" bil of Lh j th block of llie encrypled-coded dala (cipherlexl).

TABLE I: Steps Used in Performing the Proposed Algorithm in Relay-Based Cooperative Wireless Communication Systems

[0026] The encryption ratio (β 0 ), can be defined as the ratio of the overall ciphertext using the XOR operation to the encrypted text using traditional algorithms. Mathematically this can be expressed as:

Encrypted-coded text using the XOR

Encrypted text using traditional algorithms

- (N F N b - l) , ( 1) where N F , N b , and Br are as defined earlier. This parameter reveals the amount of overhead processing cycles reduction when using the disclosed algorithm. As a result, as the value of β ε increases, the throughput increases, and the overhead decreases, for a given superframe of data. This metric allows for performance analysis of the disclosed methods. One may argue that the process in our proposed technique may compromise security since a successful attack on only the first block will reveal or affect all of the subsequent blocks as well. In fact, this argument also applies to the case when all the all the blocks are encrypted traditionally, rather than the proposed mechanism, since a successful attack on any block will reveal the encryption key and hence revealing all of the subsequent blocks. Furthermore, in our proposed mechanism revealing the encryption key cannot be achieved from attacking any block like the case of traditional encryption, hence successful attack is less likely. As a result, our proposed mechanism does in fact increase security. One may also argue that the approach does not prevent the avalanche effect since if the first block is in error and cannot be recovered, then all the remaining blocks in a superframe become unrecoverable. This is true but it is less likely to occur for same reason just explained for the security issue. Moreover, this likelihood can be further reduced by applying other techniques such as forward error correction (FEC) coding, automatic repeat request (ARQ), or opportunistic encryption to only one block rather than to every block in the whole superframe in the case of traditional encryption.

[0027] The amount of overhead reduction in terms of processing cycles (PC) and the normalized throughput assuming AWGN channel model can be used as a performance metric of this embodiment. For the purpose of evaluating the performance of this disclosed method, we assume the standard AES encryption algorithm in encrypting and decrypting the first block, B \ .

[0028] Overhead Analysis. The AES encryption algorithm is employed here to encrypt the first block of the superframe. We chose the block size to be 128 bits in accordance with the standards of the AES encryption algorithm [4] , and hence different key sizes of 128, 192 and 256 bits can be used.

[0029] The AES algorithm is a series of different numbers of operations that include ANDs, XORs, and Shifting of bits. The AES algorithm is not symmetric algorithm in terms of number of operations during the encryption and decryption processes. In fact, the number of operations in the decryption process is much larger than the number of operations in the encryption process. For an AES algorithm with a block size of 128 bits, the total number of byte-wise processing cycles (PC) in the encryption process of a block, T E.B., was found to be: τ ΚΒ . = [256 Γ ΑΝΟ + 136 Γ ΧΟΚ + 352 T shift ] (R - 1)

+ 64 Γ ΑΝΟ + 44 Γχοκ + 12 r shift , and for the decryption process, T D B., the number of PC is given by

r D.B. = [644 T AND + 500 Γ ΧΟΚ + 224 r shift ] (R - 1)

+ 64 T AND + 44 r XOR + 12 r shift , where T AND , T XOR , and s hif t denote the number of processing cycles required for performing byte-wise operation of AND, XOR, and shift, respectively, and R is the number of rounds in the AES algorithm that depends on the key length. Then, the total number of PC overhead when encrypting a superframe using the AES algorithm, T E.S.F., becomes

and for the decryption process, T DS.F., it becomes

On the other hand, the disclosed hybrid encryption-coding algorithm requires only a 16 byte- wise XOR operation resulting in a total number of PC in a superframe as

TE,Proposed Algorithm = Τ .Β. + 16 ? c 7XOR

and for decryption, we have

TD>Proposed Algorithm = Tj) B. + 16 ? c TXOR -

[0030] Unlike the AES, the disclosed encryption-coding algorithm does not increase the PC overhead for any block other than the first one. It is of significant importance here to introduce a new metric, overhead reduction factor, defined as

Processing cycles in the disclosed algorithm

Processing cycles in AES algorithm

For the encryption process, this factor is

1 16&

and for the decryption process, a similar equation for this factor is obtained except for T D B. instead of T E.B. as follows:

J * o,H,D, = n 1 + ( R TXOR. (10)

[0031 ] In the numerical results, we assume that the number of PC for all of the logical operations is the same, i.e., T AND = T XOR = T SHIFT = T 0 . Using this assumption, the overhead reduction factors for the encryption and decryption processes, respectively, become

and

The results in (11) and (12) represent the amount of overhead reduction considering the disclosed algorithm in both encryption and decryption processes, and they will be used to obtain the overhead performance curves in the numerical results section.

[0032] Throughput and Security Level. As we indicated earlier, in any encryption algorithm, the security level is obtained at the cost of reduced achievable throughput, and, hence, this tradeoff should be considered in evaluating any security algorithm. The security level is directly proportional to the block length of the encrypted message, whereas the throughput is inversely proportional to the block length because of the associated overhead data and the fact that the block might be completely dropped due to avalanche effect in wireless channels.

[0033] In general, the security level can be defined as the amount of computational analysis required by a cryptanalysis to break down the algorithm and decrypt the cipher. The Brute force method (trying all the possible combinations for the key) to decrypt the cipher is usually used when describing the security level of any encryption algorithm. There are 2 key length combinations considering the Brute force attack to break the cipher, and, therefore, the security level (SN) for a block text with a block length (Bi) can be mathematically formulated as [2]

S N = log 2 [Bi]

[0034] Assuming the bit error probability is p e , the probability of receiving a block of length Bi_ bits correctly is Consequently, the throughput (T ) can be defined as the number of correctly received bits (carrying information) per second, which can be written mathematically in terms of the bit rate (<2¾ as

T = K (i - Pe ) 3 ' - (14)

[0035] As shown in FIG. 3, the whole superframe consists of Nf frames, and each frame consists of Nb blocks. This superframe is encrypted in two steps. First, encrypting the first block using an AES with one key, and all of the remaining blocks are encoded via a bit-wise XOR operation with the first block (plaintext) yielding a full encrypted-coded superframe with the same security level as the first block. Then, the overall achievable security level can be given as

^ N F N b

£>Max

= s

= log 2 [i¾, (15) where S, = Sfi rst block = S.

[0036] The average throughput can be obtained by averaging the throughput amounts of all of the blocks within one superframe (since one encryption algorithm is used for the whole superframe) as follows: r =

N F N h

¾ (1 - Pl > +

N F N„ Y ' ¾ (1 - Pi

i=2

7ϊ.ι (1 - ρι) Β ' +∑ ¾ (l - j¾)

( + 1)

(IS)

[0037] The results in (15) and (16) are used to obtain the performance behavior curves for the security level and the normalized throughput at a certain error rate probability. Assuming a BPSK modulation technique with coherent detection to be used during the transmission over the AWGN channel, it is well-known that pi = Q (^2γ) where γ is the average signal-to-noise-ratio (SNR) per bit (see, e.g., [5]- [7]). We also assume that same data rate is shared among all blocks excluding the first block, i.e., which is a valid assumption. However, the effective data rate for the first block is assumed to be ¾— where η < 1 because of the overhead associated with the AES encryption used for the first block. Then, it is straightforward to show that the throughput expression in (16) reduces to

The expression in (17) will be used in the numerical section to obtain the throughput performance curves considering the disclosed encryption-coding algorithm in the AWGN wireless channel.

[0038] Results [0039] A comparison between the overhead processing cycles of the conventional AES algorithm and the disclosed algorithm is presented in FIG. 4 for both encryption and decryption processes at β ε = 20. As can be seen, the amount of overhead increases linearly as the key length increases for both processes. A significant overhead difference can be observed for the case of our disclosed algorithm as compared to the tradition AES algorithm.

[0040] Unlike the AES algorithm, the increment in the overhead processing cycles for our disclosed algorithm is negligible when the key length increases. Additionally, as previously explained, there is a large difference for the overhead processing cycles between the decryption and encryption algorithms, as expected. FIG. 5 presents the reduction factor in the overhead processing cycles in both processes versus the encryption ratio, β 0 , at R = 10. It should be appreciated that the reduction factor is a fastly decreasing function of the encryption ratio. These observations point out the tradeoff between the security level and the overhead processing cycles.

[0041 ] The normalized security level and the normalized throughput versus the block length for different values of encryption ratios, β , and for a fixed error probability are shown in FIG. 6. As can be observed from the curves, the normalized throughput increases as the encryption ratio increases. On the other hand, the security levels share the same curve for all values of the encryption ratio, β . However, a tradeoff is clearly observed between the throughput and the security level as the block length increases. [0042] FIG. 7 provides a comparison between the disclosed algorithm, traditional AES algorithm with fixed length [4], and the opportunistic encryption algorithm [2]. The security level was maintained at log 2 (128) = 7 for all encryption algorithms, and the required security level was set to 0.9832. The block length for the opportunistic algorithm was chosen from the set [64, 80, 96,112,128]. As can be seen from the figure, the throughput of our disclosed algorithm out-performs the other two algorithms in the entire range of the SNR due to the fact that other algorithms require more overhead bits as the length of the superframe increases, unlike the presently disclosed algorithm. In this figure, we assume no service when the 7 < 4 corresponding to a P e > 10 for the BPSK modulation technique.

[0043] We have disclosed a novel simple encryption algorithm and structure that embodies it that achieves a predefined security level based on AES standard for the whole data frames. The overhead processing cycles required by the disclosed algorithm are very small compared to the overhead processing cycles required by the fixed block length traditional AES encryption algorithm or the opportunistic encryption with variable block length. As a case study, we considered encrypted data with the BPSK modulation technique, and we derive a complete analysis for the throughput assuming the wireless AWGN channel model.

[0044] The terms "comprising," "including," and "having," as used in the claims and specification herein, shall be considered as indicating an open group that may include other elements not specified. The terms "a," "an," and the singular forms of words shall be taken to include the plural form of the same words, such that the terms mean that one or more of something is provided. The term "one" or "single" may be used to indicate that one and only one of something is intended. Similarly, other specific integer values, such as "two," may be used when a specific number of things is intended. The terms "preferably," "preferred," "prefer," "optionally," "may," and similar terms are used to indicate that an item, condition or step being referred to is an optional (not required) feature of the invention.

[0045] The invention has been described with reference to various specific and preferred embodiments and techniques. However, it should be understood that many variations and modifications may be made while remaining within the spirit and scope of the invention. It will be apparent to one of ordinary skill in the art that methods, devices, device elements, materials, procedures and techniques, other than those specifically described herein, can be applied to the practice of the invention as broadly disclosed herein without resort to undue experimentation. All art-known functional equivalents of methods, devices, device elements, materials, procedures and techniques described herein are intended to be encompassed by this invention. Whenever a range is disclosed, all subranges and individual values are intended to be encompassed. This invention is not to be limited by the embodiments disclosed, including any shown in the drawings or exemplified in the specification, which are given by way of example and not of limitation.

[0046] While the invention has been described with respect to a limited number of embodiments, those skilled in the art, having benefit of this disclosure, will appreciate that other embodiments can be devised which do not depart from the scope of the invention as disclosed herein. Accordingly, the scope of the invention should be limited only by the attached claims.

[0047] All references throughout this application, for example, patent documents, including issued or granted patents or equivalents, patent application publications, and non-patent literature documents or other source material, are hereby incorporated by reference herein in their entireties, as though individually incorporated by reference, to the extent each reference is at least partially not inconsistent with the disclosure in the present application (for example, a reference that is partially inconsistent is incorporated by reference except for the partially inconsistent portion of the reference).

[0048] References:

[1] J. Reason, End-to-End Confidentiality for Continuous-Media Applications in

Wireless Systems, Ph.D. dissertation, UC Berkeley, December 2000.

[2] M. A. Haleem, C. N. Mathur, R. Chandramouli, and K. P. Subbalakshmi,

"Opportunistic Encryption: A Trade-Off between Security and Throughput In Wireless Networks," IEEE Transactions on Dependable and Secure Computing, vol. 4, no. 4, pp. 313-324, October-December 2007.

[3] Y. Xiao, B. Sun, H. Chen, S. Guizani, and R. Wang, "Performance Analysis of Advanced Encryption Standard," IEEE GLOBECOM 2006, Proceedings of the IEEE Global Telecommunication Conference. Digital Object Identifier

10.1109/GLOCOM.2006.285, pp. 1-5, November 27 -December 1, 2006.

[4] Behrouz A. Forouzan, Introduction to Cryptography and Network Security, McGraw- Hill, 2007.

[5] S. Haykin, Digital Communications. New York, NY: John Wiley, 1988.

[6] J. Proakis, Digital Communications, 3rd ed. New York, NY: McGraw-Hill, 1995.

[7] B. P. Lathi and Zhi Ding, Modern Digital and Analog Communication

Systems, 4th ed. Oxford University Press: New York 2009.