Broadcast Authentication Using One-Way Chain and Segmented Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In broadcast authentication, existing methods face challenges in reducing communication and computation overheads while maintaining security, particularly in large-scale networks where multiple secret keys are required, leading to increased tag lengths and potential delays due to key disclosure vulnerabilities.
Innovation Solution
A system that generates and transmits authentication information by combining tags with a one-way chain, where the generation order of chain values inversely correlates with data transmission order, allowing nodes to verify data authenticity using a common key without delaying authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If message authentication using a plurality of secret keys is used to enhance security, then security is improved, but tag length increases and communication overhead increases
Solution Approach 1:
The secret key is segmented into multiple key parts (first key part, second key part, etc.) that are distributed to different nodes. Each node receives only its assigned key part rather than the complete secret key, enabling secure broadcast authentication while keeping individual node key storage minimal and tag lengths manageable.
2Reliability
If message authentication using a plurality of secret keys is used to enhance security, then security is improved, but communication overhead increases
Solution Approach 1:
The secret key is segmented into multiple key parts (first key part, second key part, etc.) that are distributed to different nodes. Each node receives only its assigned key part rather than the complete secret key, enabling secure broadcast authentication while keeping individual node key storage minimal and tag lengths manageable.
3Reliability
If secret key disclosure is delayed to prevent attacks, then security is improved, but authentication delay increases
Solution Approach 1:
Key parts are distributed to nodes in advance before the actual authentication phase. Nodes receive their assigned key parts during an initialization phase, so when authentication is needed, they can immediately use the pre-distributed key parts without waiting for key disclosure, thus avoiding authentication delays while maintaining security.
4Reliability
If digital signature using public-key cryptography is used, then security is improved, but computation amount and communication amount increase
Solution Approach 1:
The system replaces expensive public-key cryptography with cheaper common-key cryptography by distributing segmented secret keys to nodes. Each node uses its assigned key part for authentication, achieving security comparable to digital signatures but with significantly lower computation and communication overhead suitable for resource-constrained sensor nodes.
Data Source
AI summary
An information processing system performing highly secure broadcast authentication while reducing a delay until authentication, a communication amount, and a computation amount is provided. A server (100) generates authentication information for transmission data by combining a tag relating to the transmission data and a chain value associated in a chain with transmission order of the transmission data. The tag relating to the transmission data is generated by using a common key. The chain is generated by using a one-way function. A node (200) verifies whether a chain value associated with transmission order of data received in the past is generated or not by applying the one-way function to a chain value extracted by using a tag relating to the received data and authentication information for the received data. The tag relating to the received data is generated by using the common key.