Decentralized Identifier Chip Network Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing solutions for establishing a secure connection between a chip and a network are complex and require involvement of network operators, making it difficult for client devices to connect securely without additional information or credentials.

Innovation Solution

A method using a decentralized identifier (DID) and a private key for the chip to authenticate with the network, eliminating the need for network operators or central authorities by leveraging a distributed ledger to manage subscriptions and authenticate the chip securely.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a traditional network connection method is used, then secure authentication is achieved, but the process becomes complex and requires network operator involvement

Engineering Contradiction:
Improvesecure authenticationVSAvoidconnection process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a decentralized identifier (DID) as an intermediary that mediates between the chip and the network. The DID contains a public key that enables authentication without requiring direct involvement of network operators or central authorities. The chip sends a connection request with its DID address, the network retrieves the associated public key from the decentralized identifier, and authentication is performed using this public key, thereby simplifying the connection process while maintaining security

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The chip performs self-authentication by using its private key to generate authentication data locally. The chip determines authentication data using the received data and its private key, then sends this authentication data to the network for verification against the public key. This self-service mechanism eliminates the need for manual intervention by network operators during the authentication process

Inventive Principle:
Principle #25Self-service

2Ease of operation

If a decentralized identifier system is implemented, then ease of connection is improved, but new infrastructure requirements are introduced

Engineering Contradiction:
Improveconnection easeVSAvoidsystem infrastructure complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The decentralized identifier serves multiple functions: it acts as a unique identifier for the chip, contains the public key for authentication, and enables the chip to manage multiple subscriptions. The DID address is registered in advance at the chip, and the same DID mechanism works across different networks and services, providing a universal solution that simplifies connectivity while managing infrastructure requirements through a standardized approach

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12255884B2Method, ledger and system for establishing a secure connection from a chip to a network and corresponding network
Publication Date: 2025.03.18 THALES DIS FRANCE SA
  • US12255884B2 patent drawing
  • US12255884B2 patent drawing
  • US12255884B2 patent drawing

AI summary

Provided is a method for establishing a secure connection from a chip to a network. The method comprises sending a connection request with a decentralized identifier address, sending a request for getting a decentralized identifier, sending, to the network, the decentralized identifier, sending, to the chip, an authentication request with data, and determining and sending, to the network, authentication data, and authenticating the chip. It further include sending, to the ledger, a request for getting subscription data associated with the decentralized identifier address, verifying, whether the decentralized identifier address is associated with a subscription wallet address or a subscription address in an operator wallet sending, to the network, associated subscription data, verifying whether valid, and establishing, when valid, a connection to the chip.