Secure Remote Authentication for Headless Devices via Secret Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge lies in securing the boot-up process of headless computing devices (HCDs) connected to networks, particularly in environments where manual passcode entry is impractical and storing IP addresses of remote command centers is risky, making them vulnerable to cyberattacks, especially in IoT systems that lack human interfaces and require secure authentication without exposing sensitive information.
Innovation Solution
A method utilizing a self-discovery network protocol for secure communication between HCDs and remote servers to reconstruct a passcode using secret shares, where the passcode is split into multiple shares, stored securely, and only reconstructed when needed, using a broadcast communication protocol that does not require knowledge of IP addresses, thereby enhancing security by minimizing the risk of exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the HCD stores the IP address of remote command centers, then authentication can be performed, but security is compromised and the system becomes vulnerable to cyberattacks
Solution Approach 1:
The patent extracts the IP address information from the HCD system entirely. Instead of storing remote command center IP addresses in the HCD, the system uses broadcast communication where servers listen on the network and HCDs can authenticate without knowing server addresses. This removes the security vulnerability while preserving authentication capability.
Solution Approach 2:
The patent introduces broadcast communication as an intermediary mechanism. Rather than direct point-to-point communication requiring stored IP addresses, the system uses network broadcasts where servers announce their presence and HCDs can connect without prior knowledge of server addresses, eliminating the security risk.
2Reliability
If manual passcode entry is required for HCD authentication, then security can be maintained, but operation becomes impractical for headless devices
Solution Approach 1:
The patent implements self-service authentication where the HCD automatically performs authentication operations without human intervention. The system uses automated secret share retrieval and passcode reconstruction, allowing headless devices to authenticate themselves autonomously while maintaining security through the secret sharing mechanism.
Solution Approach 2:
The patent performs preliminary actions by pre-distributing secret shares to HCDs during manufacturing or initial setup. These secret shares are stored securely in the HCD and automatically used during authentication, eliminating the need for manual passcode entry while maintaining security through the mathematical properties of secret sharing.
3Ease of operation
If passcodes are stored in clear on HCDs, then authentication is simple, but security is compromised and passcodes can be stolen
Solution Approach 1:
The patent segments the passcode into multiple secret shares using secret sharing schemes. Instead of storing a single clear-text passcode, the system divides it into multiple fragments (secret shares) that are stored separately in the HCD. These shares alone are useless without combining them, providing security while enabling automated authentication when shares are properly combined during the authentication process.
4Reliability
If HCDs remain off-line to minimize vulnerability, then security is improved, but automated authentication and remote control become impossible
Solution Approach 1:
The patent implements periodic or on-demand network engagement for authentication purposes. HCDs remain offline for most operations to maintain security but periodically come online to perform authentication transactions when needed. The broadcast communication protocol allows servers to announce availability, and HCDs can quickly establish secure connections for authentication then return offline, minimizing exposure while enabling automated authentication.
Data Source
AI summary
A method for authentication of a computing device so that shares of a secret may be delivered, over a network that uses a communications protocol which does not require use of an address, and on which an authentication server is listening, comprising the steps of dividing the secret into a first share and a second share, or more; destroying the secret; transmitting the second share, together with a unique identifier, out of band to a pre-designated location; erasing the second share from the computing device; storing the first share at the computing device; broadcasting the unique identifier over the network; accepting a request over the network from an authentication server to initiate an authentication protocol; responding to the request; receiving the second share from the authentication server; and reconstructing the secret using the received second share and the stored first share.