Ephemeral Certificate Authentication for Non-Internet Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Non-Internet electronic devices, such as Bluetooth devices and internal servers, lack the capability for identity security authentication and strong encryption/decryption, making them vulnerable to cyber threats due to limited hardware performance and design considerations that prioritize cost and simplicity over security.
Innovation Solution
A cyber security authentication method enables non-Internet devices to perform third-party cloud identity authentication through a network transport service using ephemeral decryption keys, digital signatures, and authentication tokens, establishing a three-party transmission connection with a security server to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If non-Internet electronic devices do not connect to the Internet to maintain simplicity and low cost, then device complexity and manufacturing cost are reduced, but cyber security authentication capability is lost
Solution Approach 1:
The patent introduces a cloud server as an intermediary to perform identity authentication and key management operations. The non-Internet device delegates security-critical functions to the cloud server, which acts as a mediator between the device and the authentication process. This allows the device to maintain simplicity while achieving secure authentication through the cloud-based intermediary.
2Ease of manufacture
If non-Internet electronic devices lack strong encryption capability to reduce hardware requirements, then manufacturing cost is reduced, but communication security is compromised
Solution Approach 1:
The cloud server serves as a security intermediary that performs strong encryption and decryption operations. The non-Internet device communicates with the cloud server using encrypted channels, delegating the computationally intensive cryptographic operations to the cloud infrastructure. This enables secure communication without requiring strong encryption hardware in the device itself.
Solution Approach 2:
The system performs preliminary key exchange and encryption setup through the cloud server before actual data transmission. Security credentials and encryption keys are established in advance through cloud-based authentication, allowing the device to communicate securely without having to perform complex cryptographic operations locally.
3Device complexity
If non-Internet electronic devices do not perform identity authentication to maintain simplicity, then device complexity is reduced, but unauthorized access vulnerability increases
Solution Approach 1:
The cloud server acts as an identity authentication intermediary that verifies device identities and manages access credentials. The non-Internet device relies on the cloud server to perform authentication checks, allowing the device to maintain simplicity while ensuring that only authorized devices can access the network or services.
Data Source
AI summary
The present invention relates to a cyber security authentication method. The method includes the following steps: in a user device: randomly generating an ephemeral decryption key, transmitting the ephemeral decryption key to a security server, and retrieving a key index from the security server; encrypting an identity information based on a part of the ephemeral decryption key to generate an electronic digital signature and an authentication token; and combining the key index, the electronic digital signature, and the authentication token to form an ephemeral certificate and transmitting the ephemeral certificate to a non-Internet electronic device; and in the non-Internet electronic device: parsing the ephemeral certificate to obtain the key index; and forwarding the key index to the security server via a transport connection including the user device to retrieve the ephemeral decryption key from the security server based on the key index.