Authentication Chip Cloning Prevention via Segmented Secret Derivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Counterfeiting of authentication chips in the consumables sector is a significant issue, as clones of original devices can be manufactured using acquired secret keys, making it difficult to identify and prevent their use.
Innovation Solution
A consumer device comprising a sensor, data processing, and authentication components that derive a secret value from a received data packet, allowing for secure authentication without the need for non-volatile memory, thereby hindering the cloning of consumables.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secret key is stored in authentication chips for mutual authentication, then authentication functionality is enabled, but the risk of counterfeiting increases as clones can be manufactured using the acquired secret key
Solution Approach 1:
The authentication system is segmented into multiple components: a first device storing a first secret value, a second device storing a second secret value, and both devices storing shared authentication data. This segmentation ensures that no single device contains all authentication secrets, making cloning more difficult as each device only holds partial authentication information.
Solution Approach 2:
Different secret values are assigned to different devices (first secret value in first device, second secret value in second device), creating local quality differences. Each device has unique local authentication characteristics that cannot be replicated by a single clone, as the authentication requires coordination between multiple devices with different secret values.
2Object-affected harmful factors
If blacklisting is used to prevent counterfeit devices, then some counterfeit devices can be blocked, but it is not always possible to identify and prevent all counterfeit devices
Solution Approach 1:
The authentication system implements a feedback mechanism where the first device and second device mutually verify each other's authenticity through challenge-response authentication. Both devices use their respective secret values to verify the other, creating a feedback loop that ensures only authenticated devices can communicate, making it difficult for counterfeit devices to infiltrate the system.
3Ease of operation
If a single secret key is used across multiple devices, then authentication is simplified, but cloning becomes more effective as one key can authenticate multiple devices
Solution Approach 1:
The system uses asymmetric secret values where the first device holds a first secret value and the second device holds a second secret value, rather than using symmetric keys. This asymmetry ensures that compromising one device's secret does not compromise the other device's authentication, as each device contributes differently to the mutual authentication process.
Data Source
AI summary
A device comprises a receive device which is designed to receive a data packet from a communication partner. The device comprises a data processing device which is configured to process the data packet in order to obtain a secret (e.g. predetermined) value. The device further comprises a transmit device which is designed to transmit a transmit message comprising information based on the secret value to the communication partner. The device further comprises an authentication device which is designed to receive a challenge message and to use the secret value to create a response message. The transmit device is designed to create the transmit message in such a way that it comprises the response message.