Daisy Chain Authentication Aggregation for Servant Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In daisy chain communication systems, transmitting individual signatures for each servant device can result in excessive data transfer, increasing costs and system complexity, especially when the data responses are small compared to the signature size.
Innovation Solution
Implementing a system where intermediate servant devices generate and propagate authentication information based on previous responses and assigned keys, allowing a single signature to authenticate multiple servant devices, thereby minimizing data transfer while ensuring security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If individual signatures are transmitted for each servant device, then authentication security is improved, but data transfer volume increases excessively
Solution Approach 1:
Multiple individual signatures from different servant devices are merged into a single aggregated signature. The master device collects signatures from multiple servant devices and combines them using a cryptographic aggregation function, resulting in one compact signature that represents all authenticated devices. This reduces the total signature data volume from O(n) individual signatures to O(1) aggregated signature while preserving the security of individual authentication.
Solution Approach 2:
A single aggregated signature serves multiple authentication purposes simultaneously. Instead of requiring separate signature transmission for each servant device, the aggregated signature universally represents the authentication status of all participating servant devices. This multi-functional signature eliminates the need for individual signature handling while maintaining the ability to verify each device's authentication.
2Reliability
If individual signatures are transmitted for each servant device, then authentication completeness is improved, but system complexity increases
Solution Approach 1:
The system merges multiple individual authentication operations into a single aggregated authentication process. Instead of managing separate signature verification for each servant device, the master device performs one aggregation operation and one verification operation on the combined signature. This significantly simplifies the system architecture while ensuring that all servant devices are authenticated through the unified aggregation mechanism.
Solution Approach 2:
The patent extracts the essential authentication information from multiple individual signatures and consolidates it into a single aggregated signature. By taking out only the necessary cryptographic elements and combining them through aggregation functions, the system eliminates redundant data and processing steps, reducing overall system complexity while preserving authentication completeness.
3Measurement precision
If individual signatures are transmitted for each servant device, then authentication accuracy is improved, but transmission cost increases
Solution Approach 1:
The patent combines multiple signature transmissions into a single aggregated signature transmission. By merging the cryptographic representations of multiple servant devices into one compact signature, the system maintains authentication accuracy (each device is still individually verified through the aggregation process) while dramatically reducing the total data transmission volume and associated energy costs.
Solution Approach 2:
The system changes the parameter of signature representation from individual separate signatures to a single aggregated signature. This parameter change in the data structure transforms the transmission from O(n) individual signature units to O(1) aggregated signature unit, reducing transmission bandwidth requirements and energy consumption while preserving the cryptographic security and authentication accuracy through mathematical aggregation functions.
Data Source
AI summary
An intermediate servant device connected in a daisy chain configuration with a set of devices is described. The intermediate servant device may be configured to receive, from a previous servant device of the set of servant devices, a request for data, a first response to the request for data, and authentication information for the first response to the request for data. The intermediate servant device may be further configured to generate a second response to the request for data and determine authentication information for the second response based on the authentication information for the first response, the second response, and a key assigned to the intermediate servant device. The intermediate servant device may be further configured to output at least the authentication information for the second response, the first response, and the second response.