Challenge-Response Authentication Using Client Pre-Calculated Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device authentication methods using challenge & response techniques are vulnerable to data leakage and require significant computational resources on the server side, which can be improved.
Innovation Solution
A client-side pre-calculated data approach is implemented, where the client generates and transmits pre-calculated data to the server for setting a response key, reducing the need for server-side calculations and minimizing data exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the server performs all calculations for setting the response key, then the authentication can be completed, but the server requires significant computational resources and data leakage risk increases
Solution Approach 1:
The response key setting calculation is divided into two parts: the client performs the first calculation to generate pre-calculated data, and the server performs only the second calculation using the pre-calculated data. This segmentation reduces the server's computational burden while maintaining authentication security.
Solution Approach 2:
The client performs preliminary calculations and generates pre-calculated data before the authentication process. This pre-calculated data is then transmitted to the server, which uses it to complete the response key setting. The preliminary action shifts computational work to the client side, reducing server resource requirements.
2Ease of operation
If the server stores all key data and seed data, then the authentication process can proceed, but the risk of data leakage from the server increases
Solution Approach 1:
The patent extracts and removes sensitive key data and seed data from the server's storage. Instead of storing all authentication data locally, the server only stores minimal information and receives pre-calculated data from the client. This extraction significantly reduces the server's data leakage risk while maintaining authentication functionality.
Solution Approach 2:
The pre-calculated data acts as an intermediary between the client and server. It allows the server to perform authentication without storing sensitive key data and seed data locally. The pre-calculated data facilitates the authentication process while preventing direct storage of sensitive information on the server.
3Reliability
If the server performs all verification calculations, then authentication can be verified, but the information processing load on the server increases
Solution Approach 1:
The verification calculation is segmented into two parts: the client performs the first calculation to generate pre-calculated data, and the server performs only the second calculation for verification. This segmentation maintains verification accuracy while reducing the server's processing complexity.
Solution Approach 2:
The client performs preliminary calculations and generates pre-calculated data that simplifies the server's verification task. By preparing the necessary data in advance on the client side, the server only needs to perform simpler verification operations, reducing overall processing complexity while maintaining accurate verification.
Data Source
AI summary
A server issues challenge data and transmits the challenge data to a client. The client stores pre-calculated data obtained by executing at least a part of calculation for setting a server response key, sets a client response key without using the pre-calculated data, generates response data from the challenge data received from the server, based on the client response key, and transmits the response data and the pre-calculated data to the server. The server receives the response data and the pre-calculated data, sets the server response key, based on the pre-calculated data, verifies the response received from the client, based on the issued challenge data and the server response key, and notifies the client of a result based on the verification.