Compressed Message Authentication for Resource-Limited Data Frames
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Message authentication in resource-limited systems, such as IoT devices and low-power wide-area networks, faces challenges due to the significant overhead of message authentication codes (MACs) exceeding available transmission or storage capacity, particularly with limited communication or storage resources.
Innovation Solution
A method and device for message authentication that utilizes data compression and redundant message generation to create additional space for MACs, allowing for efficient allocation and verification of MACs within data frames, even in systems with limited resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a message authentication code (MAC) is used to authenticate messages, then security against message faking or tampering is improved, but the data size increases significantly which is problematic in systems with limited communication or storage capacity
Solution Approach 1:
The patent applies partial action by using only a portion (n bits) of the full MAC output rather than the complete MAC. This allows the system to achieve adequate authentication security with a truncated MAC length, reducing the overhead from potentially 256 bits down to a manageable n bits that fits within the available space constraints of resource-limited systems.
Solution Approach 2:
The patent changes the parameter of MAC length from a fixed full length to a variable truncated length n bits. This parameter adjustment allows the authentication mechanism to adapt to different resource constraints while maintaining security, enabling the system to use only the necessary number of bits for authentication rather than always transmitting the complete MAC.
2Reliability
If a long MAC (e.g., 256 bits) is used to prevent brute force attacks, then security is improved, but the overhead becomes non-negligible in systems with limited communication or storage capacity
Solution Approach 1:
The system uses only n bits of the MAC instead of the full 256 bits, applying partial action to achieve sufficient brute force resistance with reduced overhead. This truncation allows resource-limited systems to maintain security while avoiding the non-negligible overhead associated with full-length MACs.
Solution Approach 2:
The patent employs a lighter-weight authentication approach using truncated MACs that are computationally less intensive and occupy less space. This replaces the expensive (in terms of resources) full MAC with a cheaper alternative that provides adequate security for the specific application context.
3Quantity of substance
If data compression is applied to create additional space for MAC, then available capacity for authentication is improved, but computational demands increase
Solution Approach 1:
The patent applies preliminary action by performing data compression on the message before generating the MAC. This ensures that the message is already in its most compact form, maximizing the available space for the MAC without requiring additional compression steps later in the process.
Data Source
AI summary
The present invention provides a method for message authentication. The method includes preparing a data block having an uncompressed length, compressing the data block to obtain a compressed data block that has a compressed length that is smaller than the uncompressed length, determining an available length based on the compressed length and a maximum length of a data frame, calculating a message authentication code (MAC) based on the data block, the MAC having a MAC length not greater than the available length, and creating the data frame comprising the data block and the MAC.