Asymmetric Key Authentication for Intermediate IoT Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication mechanisms for intermediate communication devices in IoT systems, such as USB devices, lack security and efficiency, particularly due to reliance on unique identifiers that can be intercepted and counterfeited, and the cumbersome process of preloading certificates on host devices.
Innovation Solution
A secure authentication mechanism that generates a unique identifier and public-private key pair for intermediate communication devices, with the public key stored in a secure remote location and the private key on the device, allowing the host device to authenticate using asymmetric-key algorithms and reducing resource overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If unique identifier-based authentication is used for intermediate communication devices, then authentication simplicity is improved, but security deteriorates because unique identifiers can be intercepted and counterfeited
Solution Approach 1:
The patent applies asymmetry by implementing asymmetric-key (public-private key) authentication instead of symmetric unique identifier authentication. The host device holds the public key while the intermediate communication device holds the private key, creating an asymmetric security model that prevents interception and counterfeiting while maintaining authentication simplicity through automated key verification processes
2Reliability
If certificate-based authentication is used for intermediate communication devices, then authentication security is improved, but device complexity increases due to the cumbersome process of preloading certificates on host devices
Solution Approach 1:
The patent extracts the certificate management burden from the host device by implementing a cloud-based Public Key Infrastructure (PKI) system. Instead of preloading certificates on every host device, the system stores public keys on a remote server and retrieves them during authentication, significantly reducing device complexity while maintaining security
Solution Approach 2:
The patent introduces a cloud-based PKI server as an intermediary between the host device and intermediate communication devices. This mediator manages public key storage and distribution, eliminating the need for complex local certificate management on host devices while ensuring secure authentication
3Reliability
If comprehensive certificate storage is implemented on host devices, then authentication security is improved, but loss of energy increases due to storage and processing overhead
Solution Approach 1:
The patent extracts authentication data storage from the host device to a cloud-based PKI server. Only essential public keys are cached temporarily during authentication operations, dramatically reducing storage requirements and the energy consumption associated with storing and managing comprehensive certificate data on host devices
Data Source
AI summary
Examples disclosed herein include accessing, by a host device, device information corresponding to an intermediate communication device communicatively coupled to the host device. Identifying, by the host device, a unique identifier corresponding to the intermediate communication device from the accessed device information. Query, by the host device, a public key from a remote resource, based on the identified unique identifier. Receiving, by the host device, the public key from the remote resource. Authenticating, by the host device, the intermediate communication device based on the received public key and a private key stored in the intermediate communication device.