Encrypted Identity Exchange for Device Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In communication networks, the process of mutual identity authentication between devices exposes sensitive information, such as digital certificates, to attackers, leading to security risks.

Innovation Solution

An identity authentication method involving an authentication server to encrypt and decrypt identity information using a message encryption key, with authentication servers verifying digital certificates to ensure confidentiality and authenticity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If identity information is transmitted in plaintext during authentication, then authentication process is simple and fast, but security is compromised as attackers can intercept sensitive information

Engineering Contradiction:

ImprovesecurityVSAvoidauthentication process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an authentication server as an intermediary between the access controller and the terminal. The terminal's identity information is encrypted by the authentication server using the access controller's public key, and the authentication result is signed by the authentication server. This intermediary mechanism ensures security without requiring the access controller to implement complex encryption and signature verification itself.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication process is segmented into distinct functional components: the terminal generates and encrypts its identity information, the authentication server verifies the encryption and generates a signed authentication result, and the access controller verifies the signature. This segmentation allows each component to perform its specific function efficiently while maintaining overall system security.

Inventive Principle:

Principle #1Segmentation

2Reliability

If digital certificates are used for identity authentication, then identity verification is reliable, but sensitive information such as ID numbers, home addresses, and bank card information is exposed to attackers

Engineering Contradiction:

Improveidentity verification reliabilityVSAvoidinformation exposure risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The authentication server acts as an intermediary that handles the sensitive digital certificate information. The terminal encrypts its digital certificate with the access controller's public key, and the authentication server verifies this encryption and generates an authentication result. The access controller only receives the signed authentication result, not the actual digital certificate, thus preventing exposure of sensitive information while maintaining verification reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent extracts the sensitive identity information (digital certificate) from the authentication result that is transmitted to the access controller. Instead of transmitting the actual digital certificate containing sensitive information like ID numbers and home addresses, only an encrypted version is sent to the authentication server, which then returns a signed authentication result without the sensitive data.

Inventive Principle:

Principle #2Taking out (Extraction)

3Reliability

If mutual identity authentication is implemented between request device and authentication access controller, then both parties can verify each other's identity, but the process becomes complex and sensitive information is vulnerable to interception

Engineering Contradiction:

Improvemutual authentication reliabilityVSAvoidauthentication process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The authentication server serves as an intermediary that simplifies the mutual authentication process. The terminal encrypts its identity information using the access controller's public key, and the authentication server verifies this encryption and generates a signed authentication result. The access controller verifies the signature to confirm the terminal's identity. This intermediary approach enables mutual authentication without requiring the access controller to implement complex encryption and signature generation itself.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical exchange of digital certificates between the access controller and terminal with a cryptographic substitution approach. Instead of directly sharing and verifying digital certificates, the terminal encrypts its identity information with the access controller's public key, and the authentication server verifies the encryption and generates a signed result. This substitution simplifies the authentication process while maintaining mutual verification reliability.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12445301B2Identity authentication method and apparatus

Publication Date: 2025.10.14 CHINA IWNCOMM

AI summary

Disclosed are an identity authentication method and apparatus. When identity information is transmitted between a request device and an authentication access controller, confidentiality processing is performed on the identity information of the request device and the authentication access controller, so as to prevent the identity information of the request device and the authentication access controller from being exposed during a transmission process, thereby ensuring that an attacker cannot obtain private and sensitive information of the request device and the authentication access controller.