Bitwise Password Hash Verification for Low Power Mutual Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current wireless authentication through password verification systems face high computational requirements and are vulnerable to guessing attacks, which increase the power consumption and size of devices, limiting their useful lifetime and security effectiveness, especially in small devices like medical sensors.
Innovation Solution
The implementation of mutual authentication protocols based on password hash verification, specifically bitwise and piecewise password hash verification, which reduce computational requirements and are resistant to passive and active attacks by exchanging verification bits or pieces of hashes using a Diffie-Hellman key exchange, requiring fewer hash computations and message exchanges.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password-based authentication protocols are implemented in small wireless devices, then security is improved, but power consumption increases and device lifetime decreases
Solution Approach 1:
The patent segments the password verification process into individual bit-level operations. Instead of computing the entire password hash at once, the protocol verifies one bit at a time through iterative hash computations, allowing the device to perform smaller, more energy-efficient computational steps that can be interrupted and resumed
Solution Approach 2:
The authentication protocol uses periodic action by alternating between computation phases and communication phases. The device performs a hash computation, sends a message, receives a response, and repeats this cycle for each bit of the password, distributing the computational load over time rather than concentrating it in one intensive operation
2Reliability
If computationally intensive password verification is performed, then authentication security is improved, but device size and cost increase
Solution Approach 1:
The verification process is divided into sequential bit-level operations rather than requiring a single high-performance computation. Each bit verification uses the previous hash result as input, creating a chain of simple operations that cumulative achieve strong security without requiring a powerful processor
Solution Approach 2:
The protocol performs preliminary actions by establishing a shared secret through Diffie-Hellman key exchange before the password verification begins. This preliminary cryptographic setup creates a secure foundation that simplifies subsequent verification steps, reducing the computational burden on the device
3Ease of operation
If traditional password verification protocols are used, then authentication is achieved, but vulnerability to guessing attacks increases
Solution Approach 1:
The protocol performs preliminary action by establishing a shared secret through Diffie-Hellman key exchange before password verification. This creates a secure cryptographic foundation that binds the verification process to the specific communication session, making captured messages useless for offline guessing attacks
Solution Approach 2:
The patent introduces cryptographic intermediaries including random nonces and hash functions that mediate the verification process. These intermediaries transform the simple password comparison into a complex cryptographic protocol that resists guessing attacks while maintaining ease of operation
Data Source
AI summary
Authentication methods are provided that allow for superior security, power consumption, and resource utilization over existing authentication methods. By computing only two hashes of a shared secret password for each protocol run, the methods described in this disclosure dramatically reduce the computational power needed to perform authentication. Similarly, by exchanging these hashes bitwise or piecewise for verification, rather than performing new hashes including each bit of the password separately, the methods described in this disclosure reveal less information about the password being authenticated than existing methods. The methods described in this disclosure also allow for authentication using fewer messages and with lower latency, reducing the amount of operational power used in the authentication process.