Lightweight IoT Authentication Using Pre-Shared Challenge Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for zero-power Internet of Things (A-IoT) devices are complex and require significant computational resources, making them unsuitable for devices with limited capabilities.
Innovation Solution
A method where pre-shared challenge information is used to calculate authentication information, allowing devices to authenticate each other without complex calculations by transmitting an authentication parameter, reducing computational burden.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication procedures are used between UE and core network, then authentication security is maintained, but calculation complexity and key architecture complexity increase significantly
Solution Approach 1:
The authentication system is segmented into two parts: a simplified authentication method for A-IoT devices using pre-shared information, and the traditional authentication procedure for regular devices. This allows zero-power devices to use a lightweight authentication path while maintaining security through the involvement of the core network side device in the background.
Solution Approach 2:
The core network side device acts as an intermediary that receives authentication information from the first device, verifies it against pre-shared information, and completes the authentication process. This mediator handles the complex verification operations, freeing the A-IoT device from performing complex calculations while maintaining authentication security.
2Reliability
If traditional authentication procedures are used, then authentication security is maintained, but energy consumption increases for zero-power devices
Solution Approach 1:
The authentication energy burden is segmented away from the A-IoT device. The device only performs simple operations like generating or retrieving pre-shared information and transmitting authentication responses, while the energy-intensive verification computations are performed by the core network side device, enabling zero-power operation.
Solution Approach 2:
The core network side device serves itself by maintaining pre-shared information locally and using it to verify authentication requests from A-IoT devices without requiring the devices to perform complex computations or consume significant energy.
3Reliability
If complex key architecture is used for authentication, then security is improved, but device complexity and operational difficulty increase
Solution Approach 1:
The key architecture is segmented into pre-shared information stored in advance on both the A-IoT device and core network side device. This pre-configured segmentation eliminates the need for complex runtime key derivation and management operations, simplifying device operation while maintaining security through the verified pre-shared credentials.
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
The present application relates to an authentication method, a device, a computer-readable storage medium, a computer program product, and a computer program. The method includes the following. A first device receives a first message from a core network side device, where the first message carries an authentication parameter. The first device sends a second message to a second device, where the second message carries the authentication parameter. The first device receives a third message from the second device, where the third message carries first authentication information, the first authentication information is calculated by the second device based on the authentication parameter and pre-shared information, the pre-shared information is shared by the second device and the first device and/or the core network side device, and the pre-shared information includes challenge information. The first device authenticates the second device based on the first authentication information.