Authenticated Cacheable Sensor Data in Information Centric Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Information-Centric Networks (ICNs), there is a need for secure and efficient authentication mechanisms to manage requests for sensor data, particularly in battery-powered sensor networks, to reduce duplicate requests and ensure data integrity while minimizing the load on sensor devices.
Innovation Solution
The solution involves using a shared encryption key and a prescribed update time interval value to generate a time-based encrypted value, which is used to authenticate requests and enable secure caching of sensor data, ensuring that only valid requests are processed and reducing the need for duplicate requests to the sensor device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Use of energy by moving object
If router devices cache sensor data to reduce requests, then the load on sensor devices is reduced, but authentication security is compromised
Solution Approach 1:
The patent applies preliminary action by having router devices pre-compute and cache authenticated interest packets before actual data requests are needed. The router generates interest packets with timestamps and encryption keys in advance, stores them in a cache structure, and only retrieves them when needed, thereby reducing the burden on sensor devices while maintaining security through pre-established authentication mechanisms.
Solution Approach 2:
The patent introduces an intermediary mechanism where router devices act as mediators between consumers and sensor devices. The router generates authenticated interest packets, manages the caching process, and handles the communication protocol, thereby reducing direct requests to sensor devices while maintaining authentication security through the router's intermediary authentication function.
2Reliability
If time-based encryption is used for authentication, then request security is improved, but processing complexity increases
Solution Approach 1:
The patent applies parameter changes by using timestamps and encryption keys as variable parameters that change over time. The interest packets include timestamps that are updated periodically, and encryption keys are derived from these timestamps. This allows the system to maintain security through parameter variation while simplifying the actual processing by using standard cryptographic operations on these parameters rather than complex authentication protocols.
Data Source
AI summary
In one embodiment, a method comprises: receiving, by a requestor device in a data network, authentication request parameters for generating a secured request for a data object, the authentication request parameters comprising a shared encryption key and a prescribed update time interval value; generating, by the requestor device, the secured request based on generating a reduced-resolution time value by dividing a current device timestamp value of the requestor device by the prescribed update time interval value, and encrypting the reduced-resolution time value using the shared encryption key; and outputting, by the requestor device, the secured request specifying an object name identifying the data object and the encrypted reduced-resolution time value, enabling a content supplier device to authenticate the secured request based on determining whether the reduced-resolution time value, multiplied by the prescribed update time interval, substantially matches a corresponding timestamp value of the content supplier device.