Dynamic Device Authentication via Interaction Database
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional authentication techniques are inadequate for securing interconnected devices, such as those in the Internet of Things (IoT), as they often require human intervention and are vulnerable to attacks, especially in scenarios where devices operate autonomously.
Innovation Solution
A method involving an interaction database that uses public and private keys for both individual devices and a group, where challenge data and responses are dynamically generated and encrypted, ensuring secure authentication without human intervention by utilizing multiple encryption layers and selecting authenticating devices within a trusted group.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication techniques (static password) are used, then implementation is simple, but security is insufficient and vulnerable to replay attacks
Solution Approach 1:
The patent transforms static authentication (fixed passwords) into dynamic authentication using challenge-response pairs. The authentication data changes with each interaction based on challenge questions and interaction history from the interaction database, preventing replay attacks while maintaining manageable complexity through automated processes.
Solution Approach 2:
The interaction database serves as an intermediary that stores interaction history and enables challenge-response authentication. It mediates between devices and remote computer systems, providing the basis for generating dynamic authentication data without requiring complex peer-to-peer authentication protocols between each device pair.
2Reliability
If multi-factor authentication techniques are used, then security vulnerabilities are reduced, but human effort and time consumption increase
Solution Approach 1:
The system enables devices to authenticate themselves autonomously using stored private keys and interaction data from the interaction database. Devices can generate and verify challenge-response pairs without human intervention, allowing security operations to be self-service driven while maintaining strong authentication protocols.
Solution Approach 2:
Authentication credentials (public and private keys) are pre-configured in devices before they need to authenticate. The interaction database is pre-populated with interaction history that serves as the basis for challenge questions. This preliminary setup eliminates the need for real-time human configuration during authentication operations.
3Extent of automation
If devices operate autonomously without human support, then operational independence is achieved, but security threats from attacks increase
Solution Approach 1:
The system implements preventive security measures by using encrypted challenge-response authentication that inherently resists replay attacks and man-in-the-middle exploits. The interaction database stores authenticated interaction history that can be used to detect and prevent anomalous behaviors, providing preliminary protection against security threats before they can compromise autonomous devices.
Solution Approach 2:
Dynamic challenge-response authentication ensures that security credentials change with each interaction, making it difficult for attackers to compromise autonomous devices. The system adapts to each authentication attempt by generating unique challenges based on interaction history, providing robust security for autonomous operations without requiring continuous human oversight.
Data Source
AI summary
Provided is a method for authenticating a device. The method may include coupling a first device to an interaction database that is connected to a second device. The first and second devices store first group public and private keys. The second device also stores second device public and private keys. The first device transmits to a remote computer system a first message encrypted with a remote computer system public key that includes challenge data and response data encrypted with the first group public key and authentication data. The second device receives from the remote computer system a second message including the encrypted challenge data. The second device transmits to the remote computer system a third message including the response data. In response to receiving an authentication message, interaction may be permitted between the first device and remote computer system. A system and computer program product are also disclosed.