Device-to-Device Discovery Using Identity-Based Cryptography

The patent introduces a mediator mechanism where devices exchange and verify public keys through discovery messages. This intermediary key exchange process enables secure communication without requiring continuous network coverage or a common root of trust, as each device independently verifies the other's identity through cryptographic signatures embedded in discovery messages.

The patent implements preliminary authentication by establishing security associations and exchanging cryptographic credentials during the discovery phase before actual communication begins. Devices perform mutual authentication and key agreement in advance, ensuring that when out-of-coverage scenarios occur, the security framework is already in place without requiring real-time network verification.

The patent employs universal cryptographic algorithms (ECCSI and SAKKE) that can be implemented across diverse device types and scenarios. These multi-functional algorithms provide both authentication and key agreement capabilities in a unified framework, reducing the need for multiple separate cryptographic implementations and thereby limiting the increase in device complexity.

The patent replaces complex mechanical or procedural security verification mechanisms with mathematical cryptography-based authentication. By substituting physical security infrastructure (like trusted network anchors) with cryptographic proof mechanisms, the system achieves enhanced security without requiring proportional increases in physical device complexity or infrastructure.