Homomorphic Authentication Challenge-Response Against Replay Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Biometric authentication systems using homomorphic encryption are vulnerable to replay attacks, where intercepted authentication information is resent by malicious attackers, compromising security.
Innovation Solution
An authentication system employing a challenge-response protocol with random numbers, where the authenticatee generates and transmits a pair of elements encrypted with different random numbers, and the authenticator modifies the response using the first random number to obtain a genuine ciphertext, ensuring security against replay attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If homomorphic encryption is used to protect biometric information during authentication, then security against unauthorized decryption is improved, but vulnerability to replay attacks increases
Solution Approach 1:
The patent introduces dynamic challenge-response pairs where the authenticator generates a unique challenge (random number) for each authentication session, and the authenticatee generates a corresponding dynamic response. This dynamic exchange ensures that authentication credentials change with each session, preventing replay attacks while maintaining homomorphic encryption for secure biometric verification
Solution Approach 2:
The patent uses a challenge-response mechanism as an intermediary layer between the biometric data and the authentication decision. The challenge (random number from authenticator) and response (computed by authenticatee) act as mediators that verify liveness and prevent replay attacks, while the actual biometric verification is performed homomorphically on encrypted data
2Reliability
If a challenge-response protocol is implemented to prevent replay attacks, then security against replay attacks is improved, but communication volume and computational complexity increase
Solution Approach 1:
The patent changes the parameter of randomness by introducing two distinct random numbers (first random number from authenticator, second random number from authenticatee) that are combined in the authentication process. This parameter change enables the challenge-response mechanism to prevent replay attacks while keeping the computational operations compatible with homomorphic encryption schemes
Data Source
AI summary
An authentication system transmits a ciphertext of authentication information from an authenticatee apparatus to an authenticator apparatus using homomorphic encryption with a public key encryption scheme, the authenticator apparatus issues a first random number to the authenticatee apparatus, the authenticatee apparatus generates a second random number and transmits to the authenticator apparatus a first element generated with a public key using the first and the second random numbers and a second element generated with a public key using the second random number, and the authenticator apparatus modifies the second element using the first random number to obtain a ciphertext of the authentication information.