Asymmetric Encryption for Device Access Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current device access methods face security challenges due to the interception of user names and passwords, making it difficult for hosts to verify whether multiple terminals are connected using the same credentials.
Innovation Solution
A device access method and system that utilize asymmetric encryption by generating passwords based on a private key and an identifier, which are then verified using a public key, ensuring each terminal has a unique password and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the host uses traditional password verification methods, then the device access process is simple, but the security is low because intercepted passwords can be reused by multiple terminals
Solution Approach 1:
The patent divides the password verification process into two independent parts: terminal identification (using identifier) and password verification (using encrypted password with public key). This segmentation ensures that even if passwords are intercepted, the host can detect multiple terminal connections through unique identifiers, thereby improving security without requiring overly complex verification processes
Solution Approach 2:
The patent introduces an encrypted password mechanism as an intermediary between the terminal and host. The password is encrypted using the host's public key before transmission, and verified using the private key. This intermediary mechanism protects against password interception while maintaining a relatively simple verification flow, resolving the contradiction between security improvement and process complexity
2Reliability
If the host stores and compares passwords locally, then the verification process is fast, but the host cannot detect when multiple terminals use the same credentials
Solution Approach 1:
The patent performs preliminary actions by pre-storing the host's public key in the terminal before connection. This allows the terminal to encrypt the password using the public key before transmission, eliminating the need for time-consuming password comparison operations during the verification process. The host only needs to decrypt and verify the encrypted password, significantly reducing verification time while maintaining security
Solution Approach 2:
The patent replaces the mechanical password comparison system with an encrypted verification system. Instead of directly comparing passwords in memory (mechanical approach), the system uses cryptographic encryption and verification (information theory approach). This substitution maintains speed by using efficient cryptographic operations while enabling the host to detect multiple terminal connections through identifier tracking
3Reliability
If the system uses unique identifiers and encrypted passwords, then each terminal has unique credentials improving security, but the password generation and verification process becomes more complex
Solution Approach 1:
The patent makes the encrypted password mechanism universal by using the host's public key for encryption and private key for verification across all terminal connections. This single cryptographic pair serves all terminals, eliminating the need for complex individual key management for each terminal. The system achieves unique terminal identification through identifiers while using a universal cryptographic approach, simplifying implementation
Solution Approach 2:
The patent changes the parameter of password storage from plain text to encrypted form. Instead of storing passwords as-is (simple but insecure), the system encrypts passwords using the public key before storage and transmission. This parameter change improves security while the encryption/decryption operations remain computationally efficient, balancing security enhancement with implementation simplicity
Data Source
AI summary
A device access method applied to a host and includes: acquiring a connection request provided by a terminal, where the connection request comprises an identifier of the terminal and a password corresponding to the identifier, and the password is generated based on a private key in a key pair and the identifier; acquiring a verification result of the password, where the password is configured to be verified by a public key in the key pair; establishing a connection with the terminal in response to a successful verification; and rejecting the connection request of the terminal in response to a failed verification.