Encrypted Authentication Code Decoding for Hardware Replication Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems for electronic apparatuses, such as image forming devices, face challenges in preventing unauthorized replication and ensuring the authenticity of replaceable components, as they often rely on shared cryptographic keys that can be exploited to manufacture counterfeit authentication-target apparatuses.
Innovation Solution
An authentication-target apparatus is designed with a reception unit for identification information and a challenge, a hash calculation unit for password authentication, and a generation unit that decodes an encrypted authentication calculation code using a successful password to generate a response, making it difficult to replicate the apparatus without the correct credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a common cryptographic key is shared between authentication apparatus and authentication-target apparatus, then authentication can be executed, but the authentication-target apparatus can be replicated if data analysis succeeds
Solution Approach 1:
The authentication calculation code is segmented into multiple instruction sequences that are stored in an encrypted state. The encryption key is derived from the authentication result, creating a segmented security architecture where the code remains protected until authentication succeeds. This prevents replication even if data analysis succeeds, as the functional code is not in a usable state during storage or transmission.
Solution Approach 2:
The authentication calculation code is prepared in advance but kept in an encrypted, non-executable state. The encryption key is preliminarily tied to the authentication result, so the code can only be decrypted and executed after successful authentication. This preliminary encryption prevents unauthorized replication while maintaining the ability to authenticate genuine apparatus.
2Productivity
If authentication calculation code is stored in plaintext, then execution is fast, but the code can be extracted and used for replication
Solution Approach 1:
The authentication calculation code is cushioned by encryption before storage or transmission. The encryption provides a protective layer that prevents code extraction and misuse. Only after successful authentication, when the encryption key is derived, can the code be decrypted and executed. This beforehand protection maintains security while enabling fast execution of the decrypted code during authentication.
3Object-affected harmful factors
If encrypted authentication calculation code is stored, then replication is prevented, but decoding and execution time increases
Solution Approach 1:
The authentication calculation code transitions from an encrypted, static storage state to a decrypted, dynamic execution state only when authentication succeeds. The system dynamically adjusts the code's state based on authentication results, keeping it protected during storage and transmission but enabling fast execution after decryption. This dynamic state change balances security with processing speed.
Data Source
AI summary
An authentication-target apparatus receives identification information, a password, and a challenge from an authentication apparatus, hashes the password, executes password authentication by reading out comparison information corresponding to the identification information and comparing the hashed password and the comparison information, generates a response based on the challenge in a case where the password authentication is successful, and transmits the response to the authentication apparatus. The authentication-target apparatus obtains an encrypted authentication calculation code, which is a stored program code corresponding to the identification information, decodes an executable authentication calculation code from the encrypted authentication calculation code using the password successful in the password authentication, and generates the response by executing the authentication calculation code by applying the challenge to the authentication calculation code.