D2D Authentication via Hash Chain Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device-to-device (D2D) communication methods face challenges in establishing secure and efficient connections, especially in communication shadow areas where network connections to a service server are unavailable, requiring innovative authentication and connection establishment processes.
Innovation Solution
A D2D communication method utilizing a hash chain for authentication, where devices store and transmit sequential hash values to establish connections without user input, even in areas with no network connection to the service server, by employing a relay device if necessary, and automatically initiating connections when devices are nearby.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used for D2D communication, then connection establishment can be performed, but authentication security and speed are insufficient
Solution Approach 1:
The patent applies preliminary action by pre-storing hash chains and initial hash values in authentication data before the actual authentication is needed. The first device stores a hash chain (H1, H2, H3, H4) and the second device stores an initial hash value (H1), allowing rapid authentication without real-time computation when devices connect
Solution Approach 2:
The patent replaces traditional mechanical authentication processes with cryptographic hash chain verification. Instead of complex multi-step authentication protocols, the system uses simple hash value comparison where the second device repeatedly hashes its initial hash value until matching the transmitted final hash value, significantly reducing authentication time while maintaining security
2Reliability
If network connection to service server is required for authentication, then authentication can be performed, but communication in shadow areas becomes impossible
Solution Approach 1:
The patent extracts the essential authentication functionality from the network-dependent service server and embeds it directly into the terminal devices themselves. Each device stores authentication data (hash chains or initial hash values) locally, enabling autonomous authentication without requiring ongoing network connection to the service server, thus making shadow area communication possible
Solution Approach 2:
The patent introduces relay devices as intermediaries that can facilitate authentication and data transmission in shadow areas. When direct D2D authentication is needed without network access, relay devices with pre-stored authentication data can mediate the connection establishment between terminal devices, extending communication capability to areas without direct service server access
3Ease of operation
If automatic connection establishment is implemented, then user convenience is improved, but power consumption increases
Solution Approach 1:
The patent applies preliminary action by pre-configuring authentication data (hash chains and initial hash values) in devices before actual communication is needed. This allows automatic connection establishment through simple hash value comparison without requiring complex real-time authentication processes, reducing the computational power consumption of automatic connection while maintaining user convenience
Solution Approach 2:
The patent uses partial action by implementing automatic connection only for specific conditions (when devices are nearby and authentication data matches), rather than continuously attempting connections. The system monitors basic proximity conditions and only initiates full authentication and data transmission when necessary, reducing unnecessary power consumption while maintaining ease of operation for legitimate communication scenarios
Data Source
AI summary
A device-to-device (D2D) communication method is provided. According to an inventive concept, the method comprises, storing, by a first device, first authentication data including a hash chain, which is a sequential concatenation of hash values, and storing, by a second device, second authentication data including an initial hash value of the hash chain, transmitting, by the first device, a final hash value of the hash chain to the second device, determining, by the second device, whether authentication between the first and second devices has succeeded by repeatedly hashing the initial hash value stored in the second device until a hash value identical to the final hash value is returned, and if a determination is made that authentication between the first and second devices has succeeded, performing, by the first and second devices, a connection establishment process for establishing a connection between the first and second devices.