A-IoT Authentication Relay for Low-Complexity Secure Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Ambient power-enabled Internet of Things (A-IoT) devices face challenges in achieving authentication with a network while minimizing computational complexity due to their zero-power nature.
Innovation Solution
A communication method involving a first device sending a message authentication code related to a shared key to a second device, allowing the second device to authenticate the first device and establish a key for secure communication, using processors and memories to execute instructions for authentication and key calculation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication processes are used for A-IoT devices, then network security is ensured, but computational complexity increases significantly
Solution Approach 1:
The authentication process is segmented into distinct phases: initial authentication between the A-IoT device and core network, followed by service-specific authentication for target service devices. This segmentation allows the A-IoT device to use simplified authentication mechanisms for each phase rather than requiring full computational capability throughout the entire authentication process.
Solution Approach 2:
The core network acts as an intermediary that performs complex authentication operations on behalf of the A-IoT device. The core network generates and manages authentication credentials, message authentication codes, and keys, thereby offloading computational burden from the resource-constrained A-IoT device while maintaining security.
2Reliability
If complex key architectures are used for secure communication, then security is improved, but power consumption increases
Solution Approach 1:
Authentication credentials and cryptographic keys are pre-configured in the A-IoT device during manufacturing or initial provisioning. This preliminary action eliminates the need for the device to perform complex key generation and management operations during runtime, significantly reducing power consumption while maintaining security.
Solution Approach 2:
The patent employs different cryptographic parameter sets optimized for different authentication phases. For example, simpler hash functions and shorter key lengths are used for initial device authentication, while more robust parameters are used for service-specific authentication. This parameter adaptation reduces computational and energy requirements for the resource-constrained A-IoT device.
Data Source
AI summary
A communication method, a first device and a second device are provided. The communication method includes that: a first device sends first information from a core network side device to a second device, here, the first information includes a first message authentication code, the first message authentication code is related to a first shared key, the first shared key is shared between the second device and the core network side device and/or a target service device, and the first message authentication code is used by the second device to authenticate the core network side device; and the first device receives a first key from the core network side device, here, the first key is used for communication between the first device and the second device, and the first device is configured to transmit data between the second device and the target service device.