Blockchain Device Authentication via Cryptographic Challenge

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for a secure system and method to authenticate intelligent devices to perform actions on behalf of a user, as the increasing number of connected devices creates new security challenges regarding trust and collaboration.

Innovation Solution

A blockchain-based authentication method using a processor-implemented system that enables a second device to perform actions on a first device on behalf of a user, by obtaining and storing identity information and credentials, signing trust certificates, and verifying cryptographic challenges to authenticate devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used for device collaboration, then ease of operation is maintained, but security and trust verification between devices deteriorate

Engineering Contradiction:
Improvedevice authentication securityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a blockchain network as an intermediary layer between devices. The blockchain stores public keys and verification data, acting as a trusted mediator that enables devices to authenticate each other without complex direct verification protocols. This resolves the contradiction by providing strong security through the blockchain intermediary while keeping individual device complexity manageable.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent uses public key cryptography where public keys are distributed copies of private key functionality. Instead of sharing secret credentials, devices exchange public keys that can be freely copied and distributed across the blockchain network. This enables secure authentication without the complexity of managing secret sharing among multiple devices.

Inventive Principle:
Principle #26Copying

2Reliability

If blockchain-based authentication with cryptographic challenges is implemented, then device authentication security is improved, but processing time and computational requirements increase

Engineering Contradiction:
Improveauthentication trust verificationVSAvoidauthentication processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs preliminary actions by pre-generating and storing public keys on the blockchain before actual authentication is needed. When authentication is required, devices simply retrieve and verify these pre-stored public keys rather than performing full cryptographic key generation and exchange. This reduces authentication processing time while maintaining security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent optimizes the cryptographic challenge parameters by using elliptic curve cryptography which provides equivalent security to traditional methods but with smaller key sizes and faster computation. The challenge-response mechanism uses efficiently computable cryptographic operations that balance security requirements with processing time constraints.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11632239B2System and method for blockchain-based device authentication based on a cryptographic challenge
Publication Date: 2023.04.18 WORKDAY INC
  • US11632239B2 patent drawing
  • US11632239B2 patent drawing
  • US11632239B2 patent drawing

AI summary

A system for blockchain-based authentication comprises an interface and a processor configured to (i) receive, by a first device, a command from a second device, where the first device is associated with a first trust certificate, (ii) receive a second trust certificate from the second device, (iii) communicate a cryptographic challenge using a public key of the second device to the second device, (iv) receive a response to the cryptographic challenge from the second device, (v) check whether the response matches with a predetermined correct response or not, and (vi) authenticate the second device and execute the commend received from the second device only if the response matches with the predetermined correct response.