Cryptographic Authentication Protocol Pre-initialization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic authentication methods in security systems, such as those used in motor vehicle access systems, are hindered by lengthy authentication times due to data transmission rates and computational inefficiencies, particularly when using less efficient processors.
Innovation Solution
The method involves pre-initializing and encrypting a further random number for use in subsequent authentication sessions, allowing for segmented and accelerated cryptographic challenge-and-response protocols, which reduces communication and calculation times by leveraging AES128 encryption and output feedback mode, enabling faster authentication processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard cryptographic authentication protocols are used with AES128 encryption, then security is maintained, but authentication time becomes excessively long
Solution Approach 1:
The patent pre-calculates and stores authentication data (pseudo-random numbers and their encrypted forms) in memory before they are needed. When authentication is required, the pre-computed data is immediately available for comparison, eliminating the need for real-time cryptographic computation during the actual authentication process. This preliminary preparation resolves the contradiction by maintaining security through proper cryptographic methods while achieving fast authentication through advance computation.
Solution Approach 2:
The authentication process is divided into distinct phases: a preparation phase where pseudo-random numbers and their encrypted versions are pre-computed and stored, and an execution phase where authentication is performed by comparing received data with pre-stored reference data. This segmentation allows the computationally intensive encryption operations to be performed in advance rather than during time-critical authentication, resolving the time-security contradiction.
2Device complexity
If less efficient processors are used in remote devices, then device complexity and cost are reduced, but computational speed and authentication performance deteriorate
Solution Approach 1:
The patent shifts the computational burden from the remote device to a more powerful base station by pre-calculating encrypted authentication data at the base station and storing it there. The remote device only needs to transmit pseudo-random numbers and compare received authentication data against pre-stored values, requiring minimal processing power. This resolves the contradiction by enabling fast authentication without requiring sophisticated processors in constrained remote devices.
Data Source
Figure 1
Figure 2
Figure 3-I
AI summary
In order to provide a communication protocol for cryptographic authentication on the basis of at least one cryptographic algorithm, in particular according to the A[dvanced]E[ncryption] Standard], by providing at least one random number (PRN') for at least one first, in particular present, authentication sequence or authentication session (n), and providing at least one further random number (PRN2, PRN3) for at least one further, in particular second or next, authentication sequence or authentication session (n+1), wherein the relevant time for cryptographic authentication is shortened, it is proposed that providing the further random number (PRN2, PRN3) is initialized (p) when, in particular immediately after, successfully performing the authentication in the first authentication sequence or authentication session (n).