IoT Identity Authentication via Server-Managed Dynamic Credentials

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The development and management costs of using pre-generated triples for identity authentication in Internet of Things devices are high, leading to inefficiencies and increased complexity in managing Internet of Things devices.

Innovation Solution

A method and apparatus that involve a first server acquiring identity authentication information from a second server on behalf of an Internet of Things device, enabling the device to access a target cloud service using dynamically acquired authentication information, thereby reducing the need for pre-generated triples.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If pre-generated triples are used for identity authentication, then authentication can be completed, but development complexity and cost increase

Engineering Contradiction:

Improveauthentication capabilityVSAvoiddevelopment complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the triple generation and management process from the device side and relocates it to the server side. The server now generates triples dynamically and manages their lifecycle, while devices only need to request and use them, significantly reducing device development complexity while maintaining authentication capability

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a server as an intermediary between devices and the authentication system. The server acts as a mediator that generates, manages, and distributes triples to multiple devices, eliminating the need for each device to independently handle complex triple generation and management logic

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If pre-generated triples are used for identity authentication, then authentication can be completed, but management cost increases

Engineering Contradiction:

Improveauthentication capabilityVSAvoidmanagement cost

Core Design Contradiction:

ReliabilityVSEase of manufacture

Solution Approach 1:

The patent makes the server's triple management system universal, allowing a single server instance to serve multiple devices and product types. The server can dynamically generate triples for different devices on demand, eliminating the need for separate pre-generation and distribution processes for each device, thus reducing management costs

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent transitions from static pre-generated triples to dynamic on-demand triple generation. The server generates triples dynamically when devices request them, allowing flexible management and elimination of costly pre-generation and distribution processes for large device fleets

Inventive Principle:

Principle #15Dynamics

3Reliability

If one device one secret key authentication is used, then security is improved, but development cost increases

Engineering Contradiction:

ImprovesecurityVSAvoiddevelopment cost

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The server acts as an intermediary that generates unique secret keys for each device individually, maintaining the security benefits of one-device-one-key authentication while centralizing the complex key generation and management logic on the server side, thereby reducing device development costs

Inventive Principle:

Principle #24Intermediary (Mediator)

4Device complexity

If one type one secret key authentication is used, then development cost is reduced, but adaptability decreases

Engineering Contradiction:

Improvedevelopment costVSAvoidsecondary development and management support

Core Design Contradiction:

Device complexityVSAdaptability or versatility

Solution Approach 1:

The system dynamically generates triples for each device request rather than using static pre-configured keys. This dynamic approach maintains low device development costs while enabling flexible adaptation to different devices and product types, as the server can generate appropriate triples on-demand for any device type

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The server can change parameters such as product identifiers and device secret keys dynamically based on device type and requirements, while maintaining the same efficient authentication mechanism. This allows the system to adapt to different devices without increasing device-side complexity or cost

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS12591657B2Method for acquiring identity authentication information, apparatus, storage medium and system

Publication Date: 2026.03.31 HANGZHOU ALICLOUD FEITIAN INFORMATION TECH CO LTD

AI summary

A method for acquiring identity authentication information, an apparatus, a storage medium and a system. The method includes: receiving a request message from an Internet of Things device, where the request message is used for requesting to acquire identity authentication information, and the identity authentication information is applied for and obtained by a first server from a second server, where the first server is used for acquiring the identity authentication information from the second server in place of the Internet of Things device and managing the identity authentication information, and the second server is used for providing a target cloud service corresponding to the identity authentication information; returning the identity authentication information to the Internet of Things device in response to the request message, to enable the Internet of Things device to access the second server by using the identity authentication information.