IoT Authentication via Gateway Segmentation and Disposable Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Standard Public Key Infrastructure (PKI) approaches are inadequate for constrained devices in IoT networks due to computation power, memory storage, and bandwidth limitations, and are vulnerable to root key compromises, making secure authentication and certificate management challenging, especially in large-scale deployments.
Innovation Solution
A secure authentication system that generates client private keys and certificate requests, encrypts them using device private keys, and communicates with an authentication service to establish session keys and certificates, allowing for secure device-to-device and device-to-cloud authentication, while minimizing the burden on constrained devices and avoiding custom protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard Public Key Infrastructure (PKI) is used for device authentication, then security is improved, but computation power, memory storage, and bandwidth requirements exceed the capabilities of constrained devices
Solution Approach 1:
The patent segments the authentication system into two parts: constrained devices use lightweight pre-shared keys for initial authentication, while full PKI certificates are used only by gateway devices with sufficient resources. This segmentation allows constrained devices to achieve secure authentication without bearing the full computational burden of standard PKI.
Solution Approach 2:
The patent introduces gateway devices as intermediaries between constrained devices and the cloud server. The gateway handles the computationally intensive PKI operations, including certificate verification and key management, while constrained devices only need to perform simple pre-shared key authentication. This intermediary approach resolves the contradiction by offloading the computational burden from resource-constrained devices.
2Ease of operation
If a root key is used in PKI-based systems, then certificate management is simplified, but the single point of attack compromises all devices in the network
Solution Approach 1:
The patent segments the trust model by giving each gateway device its own unique cryptographic key pair instead of deriving all certificates from a single root key. This segmentation ensures that compromise of one gateway's key does not affect other gateways or constrained devices, eliminating the single point of attack while maintaining simplified certificate management through the authentication service.
Solution Approach 2:
The patent changes the fundamental parameter of the cryptographic model from a hierarchical trust structure with a single root key to a distributed trust structure where each gateway has an independent key pair. The authentication service verifies gateway identities through this alternative parameterization, achieving both security against single-point compromise and ease of operation through centralized authentication management.
3Reliability
If digital certificates with expiration dates are used, then security is improved through automatic rotation, but constrained devices without reliable date capability cannot utilize this approach
Solution Approach 1:
The patent uses disposable pre-shared keys for constrained devices instead of long-term certificates with expiration dates. These pre-shared keys are provisioned once and used until the device is replaced or re-provisioned, eliminating the need for date capability while maintaining security through the uncloneability of cryptographic keys. This approach is analogous to using disposable security tokens rather than long-term credentials.
Solution Approach 2:
The patent enables constrained devices to perform self-authentication using their pre-shared keys without requiring date validation or certificate renewal mechanisms. The authentication service verifies these devices based on their cryptographic identity rather than temporal validity, allowing devices without reliable date capability to maintain secure authentication autonomously.
4Reliability
If manual certificate updates are performed in compromised systems, then security recovery is achieved, but the cost exceeds the price of inexpensive constrained devices
Solution Approach 1:
The patent enables constrained devices to perform self-authentication using pre-shared keys that are provisioned during manufacturing and cannot be remotely updated. This eliminates the need for manual certificate updates in the field, as the uncloneable cryptographic identity of each device provides inherent security against compromise. The low cost of this approach is reflected in the ability to use inexpensive constrained devices without requiring costly manual security maintenance.
Solution Approach 2:
The patent performs preliminary security provisioning by embedding uncloneable pre-shared keys in constrained devices during manufacturing. This preliminary action ensures that devices are secure from the outset without requiring subsequent updates or maintenance, eliminating the need for costly manual intervention in compromised systems and making the overall deployment more cost-effective.
Data Source
AI summary
A networked system for authenticating devices that comprise constrained devices connected in a network either directly to cloud based and/or dedicated servers or though gateways to cloud based and/or dedicated servers.