Ephemeral Diffie-Hellman Authentication Without Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network authentication protocols, such as the Otway-Rees scheme, rely on a trusted third party to generate keys, which can be a weakness and lack Perfect Forward Secrecy, allowing past communications to be compromised if the third party's secret is compromised.
Innovation Solution
The Ephemeral Diffie-Hellman based authentication protocol uses a trusted intermediary to authenticate network devices and users without generating keys, employing public values and nonces to establish a shared key that only the communicating parties can know, ensuring Perfect Forward Secrecy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the trusted third party generates the shared key for authentication, then the authentication process can be completed, but the trusted third party must know the shared key which creates a security weakness and prevents Perfect Forward Secrecy
Solution Approach 1:
The patent extracts the key generation function from the trusted third party, allowing parties to authenticate each other independently while the third party only verifies authentication. This removes the security vulnerability where the third party must know the shared key, while maintaining authentication reliability through cryptographic verification.
Solution Approach 2:
The authentication system enables parties to perform mutual authentication independently without relying on the trusted third party to generate or distribute keys. Each party generates their own ephemeral key pair and performs Diffie-Hellman key exchange, making the system self-sufficient while the third party only provides verification services.
2Reliability
If the trusted third party distributes keys between parties, then authentication can be established, but Perfect Forward Secrecy cannot be achieved if the third party's secret is compromised
Solution Approach 1:
The patent employs ephemeral (temporary) key pairs that are generated for each authentication session and discarded afterward. This dynamic key management ensures that even if the trusted third party's long-term secrets are compromised, past session keys cannot be derived, achieving Perfect Forward Secrecy while maintaining reliable authentication establishment.
3Reliability
If the trusted third party is used for mutual authentication, then parties can be authenticated, but the system complexity increases due to key distribution requirements
Solution Approach 1:
The patent removes the key distribution function from the trusted third party, reducing its role to authentication verification only. Parties independently perform Diffie-Hellman key exchange and generate their own session keys, eliminating the complex key distribution infrastructure while maintaining mutual authentication reliability.
Data Source
AI summary
Authentication of parties through a trusted intermediary is described. The standard Ottway-Rees authentication protocol is modified to provide authentication between A and B using intermediary T such that T serves only as an authenticator, and does not participate in the generation of the key shared between A and B.