HAN Device Authentication via Attribute-Segmented CRL
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems for Home Area Networks (HANs) face inefficiencies due to large Certificate Revocation Lists (CRLs), which increase processing time and storage requirements when checking the validity of devices, especially when the number of revoked public key certificate IDs is high.
Innovation Solution
The authentication method involves using a CRL that includes identification and attribute information, allowing devices to check the validity of other devices by limiting search targets to matching attribute information, thereby reducing processing time and storage needs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a CRL includes all revoked public key certificate IDs to ensure comprehensive authentication, then the reliability of device validation is improved, but the processing time and storage requirements increase significantly
Solution Approach 1:
The patent segments the CRL by organizing revoked certificate IDs into groups based on common attributes (e.g., device type, manufacturer, model). This segmentation allows the authentication device to search only within relevant groups rather than scanning the entire CRL, significantly reducing processing time while maintaining comprehensive validation coverage.
Solution Approach 2:
The patent applies local quality by making different parts of the CRL have different search priorities or access characteristics. Frequently accessed attribute groups can be optimized with faster search structures, while less common groups use standard formats, creating a heterogeneous CRL structure that optimizes overall authentication performance.
2Reliability
If a CRL includes all revoked public key certificate IDs to ensure complete authentication coverage, then the reliability of device validation is improved, but the storage capacity requirements increase
Solution Approach 1:
By segmenting the CRL into attribute-based groups, the patent enables more compact storage through efficient indexing and grouping mechanisms. Related certificates are stored together, allowing for better compression and reduced redundancy compared to storing all certificates in a single flat structure.
3Measurement precision
If the CRL is searched to check validity of each device, then authentication accuracy is improved, but the processing complexity increases
Solution Approach 1:
The patent reduces processing complexity by segmenting the search space into attribute-based groups. Instead of linearly searching through all revoked certificates, the system first filters by matching attributes (device type, manufacturer, etc.) to identify relevant groups, then performs targeted searches within those groups, significantly reducing computational complexity.
Solution Approach 2:
The patent optimizes different parts of the authentication process with different search strategies. High-priority attribute groups may use indexed search for speed, while less critical groups use simpler methods, creating a heterogeneous processing approach that balances accuracy with complexity management.
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
An authentication method for at least one of a plurality of devices connected to a HAN includes checking, with a first device among the plurality of devices, validity of a second device using a CRL including attribute information regarding the second device among the plurality of devices, and revoking, with the first device, the second device if the checking is negative.