Data Source Identification via Message Authentication Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data communication systems face challenges in reducing transmission overhead for data source identification and authentication, particularly in massive multiple access scenarios where short packets are transmitted, leading to significant overhead due to the need for explicit data source identifiers.
Innovation Solution
The proposed solution involves generating and receiving data packets that include a message authentication code (MAC) and a checksum, but not an explicit data source identifier, using an auxiliary identifier that is smaller and ambiguous within a plurality of data sources, allowing for identification and authentication with reduced transmission overhead through exclusive-or operations and local determination of auxiliary identifiers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If explicit data source identifiers are included in data packets for authentication, then data source identification reliability is improved, but transmission overhead increases
Solution Approach 1:
The patent combines the data source identifier and message authentication code into a single integrated authentication mechanism. The identifier is embedded within the MAC computation process rather than being transmitted separately, so the MAC serves dual purposes: both authenticating the message and identifying the data source. This merging eliminates the need for separate identifier fields in data packets.
Solution Approach 2:
The message authentication code is designed to serve multiple functions simultaneously: it provides message integrity verification, data source authentication, and data source identification. By making the MAC multi-functional, the patent eliminates the need for separate dedicated fields for each function, thereby reducing transmission overhead while maintaining all necessary authentication and identification capabilities.
2Measurement precision
If unique identifiers are transmitted for each data source, then data source identification accuracy is improved, but transmission efficiency deteriorates
Solution Approach 1:
The patent merges the identifier function into the MAC by making the MAC a function of both the message and the data source's secret key. The receiver can identify the data source by determining which key produces a valid MAC, eliminating the need for separate identifier transmission while maintaining precise identification accuracy.
Solution Approach 2:
Instead of transmitting the actual unique identifier, the patent uses a cryptographic copy approach where the identifier information is encoded within the MAC structure. The MAC acts as a cryptographic representation that contains identification information without requiring the transmission of the full unique identifier, thus improving transmission efficiency while preserving identification accuracy.
3Reliability
If message authentication codes are computed using unique keys, then authentication security is improved, but computational complexity increases
Solution Approach 1:
The patent segments the authentication process into two distinct phases: a computationally intensive key establishment phase performed offline, and a lightweight MAC computation phase performed during data transmission. The secret keys are established in advance and stored, eliminating the need for complex real-time key management during transmission, thus reducing computational complexity while maintaining high authentication security.
Solution Approach 2:
The patent performs the computationally intensive key generation and pairing operations in advance, before actual data transmission occurs. The secret keys are pre-established and stored in both transmitter and receiver devices. During data transmission, only the relatively simple MAC computation using these pre-established keys is required, significantly reducing real-time computational complexity while maintaining strong authentication security.
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
Various embodiments relate to identification and authentication of data sources. Payload data may be obtained for transmission. The payload data may be associated with a data source. A message authentication code may be computed based on a unique key of the data source and the payload data. Upon receipt, a set of candidate message authentication codes may be computed based on the payload data and unique keys associated with a set of candidate data sources, and the data source may be identified based on a match between the received message authentication code and one of the candidate message authentication codes. Embodiments of the present disclosure enable an identification and authentication of data sources with a reduced transmission overhead.