Authentication System Reducing Storage via Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional message authentication systems face inefficiencies in storage capacity and security due to the need for secret key sharing and storage of large information volumes, which complicates key management and increases the risk of key leakage.
Innovation Solution
A verification device verifies information by comparing stored comparative information with held information using authentication information generated from random data, reducing storage requirements and eliminating the need for secret key sharing, thereby enhancing security and convenience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the verification device stores a copy of the information s to verify the message authentication code, then the correctness of the authentication code can be verified, but the storage capacity efficiency of the verification device deteriorates
Solution Approach 1:
The invention extracts only the essential verification information and random information from the complete information s, storing them separately in the verification device. This allows verification to be performed without storing the entire information s, thus reducing storage capacity requirements while maintaining verification correctness.
Solution Approach 2:
The verification information is segmented into two parts: verification information (derived from information s) and random information. This segmentation allows the verification device to store only these two components rather than the complete information s, achieving efficient storage while preserving verification capability.
2Ease of manufacture
If the proving device and verification device share a secret key k for message authentication, then authentication can be performed, but the convenience and safety deteriorate due to complicated key management and leakage risks
Solution Approach 1:
The invention removes the secret key k from the authentication process entirely. Instead of using a shared secret key, the system uses verification information derived from information s and random information, eliminating the need for key distribution and management while maintaining authentication functionality.
3Ease of manufacture
If the proving device and verification device share a secret key k for message authentication, then authentication can be performed, but the safety deteriorates due to the risk of key leakage to third parties
Solution Approach 1:
The invention extracts and eliminates the secret key component from the authentication system. By using verification information and random information instead of a shared secret key, the system achieves authentication without the security vulnerabilities associated with key leakage.
Data Source
AI summary
A verification device stores verification information and first random information in a storage. The verification information depends upon contents of comparative information, and not upon an information volume of the comparative information. The verification device generates an authentication information generation factor using the first random information and transmits the factor to a proving device, which generates authentication information using the authentication information generation factor and held information and transmits the authentication information to the verification device. The authentication information depends upon contents of the authentication information generation factor and the held information, and not upon the information volume of the held information. A decision section of the verification device decides whether a predetermined relationship is established between the authentication information and the verification information and the first random information. Thereby, the verification device verifies the held information stored in the proving device is the same as the comparative information.