National or international maritime authorities are used to handle requests for licenses for all kinds of marine activities. These licenses constitute authorizations limited in time and space, but there is no technical security service to check for the authorization of a wide range of marine assets. We have noted secure AIS solutions suitable for more or less constantly internet-connected assets such as ships with satellite connections. The additional constraints posed by underwater autonomous assets, namely less power and connectivity, can be mitigated by using symmetric cryptography. We propose a security service that allows the automatized check of asset authorization status based on large symmetric keys. Key generation can take place at a central authority according to the time and space limitations of a license, i.e. timestamped and geocoded. Our solution harnesses the exceptionally large key size of the RC5 cipher and the standardized encoding of geocells in the Open Location Code system. While we developed and described our solution for offshore underwater use, aerial and terrestrial environments could also make use of it if they are similarly bandwidth constrained or want to rely on quantum-resistant and computationally economic symmetric methods.
翻译:国家或国际海事当局用于处理各种海洋活动的许可证申请,这些许可证在时间和空间上是有限的,但没有技术保安服务来核查各种海洋资产的授权。我们注意到,安全AIS解决方案适用于或多或少经常与互联网相连的资产,例如有卫星连接的船舶。水下自主资产造成的额外限制,即电力和连接能力较低,可以通过使用对称加密法加以缓解。我们提议提供一种安全服务,允许根据大型对称钥匙自动检查资产授权状况。根据许可证的时间和空间限制,即时间和地理编码,关键生成可以在中央当局进行。我们的解决办法利用了非常大的关键RC5密码和开放位置代码系统中的地质细胞标准化编码。虽然我们制定并描述了我们的近海水下使用解决方案,但航空和陆地环境如果同样受到带宽限制或希望依赖量子抗衡和计算经济对称方法,也可以加以利用。