Dynamic Security Authentication for IoT Client Impersonation Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In IoT systems, unregistered devices can impersonate registered clients, leading to data leakage and congestion by sending excessive requests, compromising the security of data transmission.
Innovation Solution
Implement a dynamic security authentication mechanism using a unique identifier for each application entity, combined with a randomly generated security identifier, which is updated periodically to enhance security against impersonation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (passwords, patterns, fingerprints) are used, then users can access accounts, but accounts may be stolen or accessed by unauthorized persons
Solution Approach 1:
The patent introduces an intermediary authentication mechanism where the server acts as a mediator between the user and the account. Instead of directly authenticating the user, the server generates and manages authentication credentials (first and second authentication information) that verify user identity without exposing sensitive data. This intermediary layer enhances security while maintaining user convenience.
Solution Approach 2:
The authentication process is segmented into multiple stages: first authentication information is sent to the client device, then second authentication information is generated and verified. This multi-stage segmentation allows for more robust security checks while distributing the authentication burden across different components, improving both security and user experience.
2Reliability
If complex security measures are implemented to prevent unauthorized access, then account security improves, but the authentication process becomes more complex and time-consuming
Solution Approach 1:
The server performs preliminary authentication actions by generating and sending the first authentication information to the client device before the actual authentication occurs. This preliminary action prepares the authentication credentials in advance, so when the user needs to authenticate, the process is faster and requires less time while maintaining high security standards.
Solution Approach 2:
The patent changes the parameters of authentication from static data (passwords) to dynamic parameters (authentication tokens that change over time). This allows for more security checks to be performed without significantly increasing authentication time, as the dynamic parameters can be quickly generated and verified by the server.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed are a data processing method for secure authentication, a server, a client device, and a medium. The data processing method comprises: receiving an identifier of an application entity (S402); generating, at least according to the identifier, a dynamic security identifier of the application entity (S404); sending the security identifier to the application entity (S406); and performing a security authentication operation on the application entity according to the security identifier (S408).