◇ OpenCyber Academy
Engineering · Chapter 42 · English

Chapter 42 — Cryptography and trust services: applied research

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 42 — Cryptography and trust services: applied research

Lesson map

Lesson 42 published. Map, example, EX124.

flowchart TD
  N0["Learning outcomes"]
  N1["42.1 A question from operations"]
  N2["42.2 Designing the study"]
  N3["Synthesis"]
  N0 --> N1 --> N2 --> N3
  N3 --> EX["Worked example"]
  EX --> Q["Exercise EX124"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["42.1 A question from operations"]
  N2["42.2 Designing the study"]
  N3["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> Q["EX124"]
[Learning outcomes]
    |
    v
[42.1 A question from operations]
    |
    v
[42.2 Designing the study]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX124]

Learning outcomes

You will (1) frame an applied research question from operational data; (2) design a small study with synthetic or authorised data; (3) report findings with limits.

42.1 A question from operations

Operational data shows that verification failures cluster on certain collectors at dawn. Aiyana frames an applied research question: are dawn failures caused by meter clock drift exceeding the timestamp tolerance after cold nights, rather than by attacks or radio noise? This question matters because widening tolerance weakens replay protection, while tightening it causes false rejections. Applied research in engineering answers questions that improve a specific system, using rigorous methods at a modest scale. Answering it could avoid both needless alerts and weaker protection.

42.2 Designing the study

Aiyana designs a study using authorised pilot data: for each failure she records collector, time, temperature from a public weather feed and the meter's reported clock offset. She defines in advance that the drift explanation is supported if failures correlate with low temperatures and large offsets, and that the attack explanation would show tags failing rather than timestamps. She uses only pseudonymised meter identifiers. The study plan is short but written before analysis, a habit from research methods that prevents fitting stories to data.

42.3 Findings and limits

The data show that most dawn failures have valid tags but timestamps outside tolerance, and occur after nights below freezing, with offsets growing in older meters. The drift explanation is supported. Aiyana recommends periodic time synchronisation from collectors, authenticated with the meter's key, instead of widening tolerance. She reports limits: one district, one winter, and correlation rather than controlled experiment. She shares the method with other utilities through the regulator's working group, without any meter identifiers. She plans a controlled follow-up with deliberately cooled test meters.

Worked example

Aiyana's study links dawn failures to cold-induced clock drift with valid tags and recommends authenticated time synchronisation rather than wider tolerance.

Synthetic case. The data and findings are invented.

Errors and limits

Correlation does not prove cause; a controlled test would strengthen it. Sharing methods must not reveal infrastructure details.

Exercises

Synthesis

Applied research turns operational puzzles into small, pre-planned studies whose findings improve the system without weakening controls.

Continue studying — chapter 42 of 50

← Chapter 41 (draft) · Course chapter index · Chapter 43 (draft) →