Elliptic Curve Key Agreement for Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Devices that interact with other devices or accept replaceable components face challenges in authenticating genuine components, as counterfeit devices can pose safety hazards and liability risks, and existing authentication methods require complex computations and random number generation, which may not be feasible for all devices due to cost and functionality constraints.
Innovation Solution
The proposed solution employs an elliptic curve Diffie-Hellman key exchange protocol where the shared key is used as a protocol message for authentication, eliminating the need for random number generation and modular integer computations, thereby simplifying the authentication process and reducing computational complexity for authentication modules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used, then authentication security is improved, but device complexity and computational requirements increase
Solution Approach 1:
The patent extracts the random number generation function from the authentication module, eliminating the need for complex cryptographic random number generators. The authentication device uses simplified operations (point addition and scalar multiplication) while the host device performs the complex random number generation and modular exponentiation, thus reducing authentication module complexity while maintaining security.
Solution Approach 2:
The patent introduces an intermediary approach where the authentication device uses elliptic curve point operations as a mediator between the secret key and the authentication proof. Instead of directly computing complex cryptographic functions, the device performs point addition and scalar multiplication on elliptic curve points, which are computationally simpler operations that still provide strong security guarantees.
2Reliability
If random number generation is required for authentication, then authentication security is improved, but cost and functionality requirements increase
Solution Approach 1:
The patent extracts the random number generation requirement from the authentication device itself. The authentication device only needs to perform deterministic point operations on elliptic curves, while the host device (which has higher computational capabilities) performs the random number generation and complex cryptographic computations. This dramatically reduces the cost and functionality requirements for manufacturing authentication devices.
Solution Approach 2:
The patent enables the use of inexpensive authentication devices that can be mass-produced with simple computational capabilities. These authentication devices can be considered 'cheap' in the sense that they require minimal processing power and can be manufactured at low cost, while still providing secure authentication when used with the host device that performs the heavy computational lifting.
3Reliability
If complex modular integer computations are performed, then authentication security is improved, but processing speed decreases
Solution Approach 1:
The patent substitutes traditional mechanical/computational approaches (modular integer computations and exponentiation) with elliptic curve point operations. Instead of performing complex modular arithmetic on large integers, the system uses point addition and scalar multiplication on elliptic curve points, which can be implemented more efficiently in hardware and provide equivalent or superior security with faster execution times.
Data Source
AI summary
A system and method are provided which employs a key agreement scheme, wherein the agreed-upon-shared key is used in a protocol message in the authentication rather than being employed as a session key.