Cryptographic Authentication Protocol Pre-initialization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cryptographic authentication methods in security systems, such as those used in motor vehicle access systems, are hindered by lengthy authentication times due to data transmission rates and computational inefficiencies, particularly when using less efficient processors.

Innovation Solution

The method involves pre-initializing and encrypting a further random number for use in subsequent authentication sessions, allowing for segmented and accelerated cryptographic challenge-and-response protocols, which reduces communication and calculation times by leveraging AES128 encryption and output feedback mode, enabling faster authentication processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If standard cryptographic authentication protocols are used with AES128 encryption, then security is maintained, but authentication time becomes excessively long

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent pre-calculates and stores authentication data (pseudo-random numbers and their encrypted forms) in memory before they are needed. When authentication is required, the pre-computed data is immediately available for comparison, eliminating the need for real-time cryptographic computation during the actual authentication process. This preliminary preparation resolves the contradiction by maintaining security through proper cryptographic methods while achieving fast authentication through advance computation.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The authentication process is divided into distinct phases: a preparation phase where pseudo-random numbers and their encrypted versions are pre-computed and stored, and an execution phase where authentication is performed by comparing received data with pre-stored reference data. This segmentation allows the computationally intensive encryption operations to be performed in advance rather than during time-critical authentication, resolving the time-security contradiction.

Inventive Principle:
Principle #1Segmentation

2Device complexity

If less efficient processors are used in remote devices, then device complexity and cost are reduced, but computational speed and authentication performance deteriorate

Engineering Contradiction:
Improveprocessor requirementsVSAvoidauthentication throughput
Core Design Contradiction:
Device complexityVSProductivity

Solution Approach 1:

The patent shifts the computational burden from the remote device to a more powerful base station by pre-calculating encrypted authentication data at the base station and storing it there. The remote device only needs to transmit pseudo-random numbers and compare received authentication data against pre-stored values, requiring minimal processing power. This resolves the contradiction by enabling fast authentication without requiring sophisticated processors in constrained remote devices.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP1882346B1Communication protocol and electronic communication system, in particular authentication control system, as well as corresponding method
Publication Date: 2020.09.09 NXP BV
  • EP1882346B1 patent drawingFigure 1
  • EP1882346B1 patent drawingFigure 2
  • EP1882346B1 patent drawingFigure 3-I

AI summary

In order to provide a communication protocol for cryptographic authentication on the basis of at least one cryptographic algorithm, in particular according to the A[dvanced]E[ncryption] Standard], by providing at least one random number (PRN') for at least one first, in particular present, authentication sequence or authentication session (n), and providing at least one further random number (PRN2, PRN3) for at least one further, in particular second or next, authentication sequence or authentication session (n+1), wherein the relevant time for cryptographic authentication is shortened, it is proposed that providing the further random number (PRN2, PRN3) is initialized (p) when, in particular immediately after, successfully performing the authentication in the first authentication sequence or authentication session (n).