Elliptic Curve Authentication Reducing Data Volume
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current RFID-based data communication systems face challenges in authentication efficiency and security, particularly due to limited computational resources and energy constraints in transponders, which require rapid and secure data exchange while minimizing data transmission and computational complexity.
Innovation Solution
A method using elliptic curve cryptography for authentication, where only part of the projective representation of the x-coordinate is transmitted from the transponder to the base station, reducing the amount of data required for authentication and leveraging the Montgomery ladder algorithm for efficient scalar multiplications, thereby simplifying and accelerating the authentication process without compromising security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complete projective representation data is transmitted for authentication, then authentication security is maintained, but data transmission volume and computational complexity increase
Solution Approach 1:
The patent extracts and transmits only the essential authentication elements from the complete projective representation. Specifically, only the x-coordinate value is transmitted instead of the full projective representation, and optionally only part of the x-coordinate is transmitted. This extraction principle reduces data transmission volume while maintaining authentication security by preserving the critical authentication information needed for verification.
Solution Approach 2:
The patent segments the projective representation data into distinct components, transmitting only the necessary x-coordinate portion rather than the complete data set. The authentication process is divided into discrete steps: generating the challenge, computing the response using elliptic curve cryptography, transmitting only the essential response component, and verifying authentication based on this segmented data. This segmentation enables reduced data transmission while maintaining security.
2Reliability
If complete authentication data is transmitted, then authentication reliability is maintained, but authentication time increases
Solution Approach 1:
The patent applies the extraction principle to reduce authentication time by transmitting only the essential x-coordinate value rather than complete authentication data. This minimized data transmission reduces the time required for data exchange between transponder and reader, while the elliptic curve cryptography ensures that authentication reliability is maintained despite the reduced data volume.
3Reliability
If full security code verification is performed, then security is maintained, but computational complexity in transponder increases
Solution Approach 1:
The patent replaces complex mechanical/computational verification systems with elliptic curve cryptography, which provides equivalent or superior security with reduced computational complexity. The mathematical properties of elliptic curves over finite fields enable secure authentication through scalar multiplication and point validation, which are computationally more efficient than traditional cryptographic methods while maintaining high security levels.
Solution Approach 2:
The patent changes the cryptographic parameters by using elliptic curve mathematics instead of traditional cryptographic approaches. By working with points on elliptic curves and utilizing the properties of scalar multiplication, the system achieves high security with lower computational complexity. The parameter optimization includes using appropriate finite fields and curve parameters that balance security requirements with the limited computational resources of the transponder.
Data Source
AI summary
The embodiments relate to a method for the encrypted data exchange between subscribers of a communication system using cryptography based on elliptical curves, wherein upon a query by a first subscriber a scalar multiplication is calculated by the second subscriber, wherein merely part of the result of the scalar multiplication is returned to the first subscriber as a response. The invention relates to a communication system.