IoT Authentication and Permission Integration for Low-Bandwidth Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT devices face challenges in managing authentication and permission granting processes, which often result in high communication loads due to the need for separate authentication and permission protocols, especially in narrow bandwidth wireless networks with limited resources.
Innovation Solution
An authentication-permission system that integrates authentication and permission granting using ID-based cryptography, where a server generates a private key and an extension identifier for each device, allowing devices to verify permission directly through the identifier during mutual authentication, reducing the need for separate communication with a permission server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate authentication and permission granting protocols are used, then security and functionality are ensured, but communication load increases
Solution Approach 1:
The patent combines authentication and permission granting into a single integrated protocol. The server simultaneously performs authentication verification and permission assignment in one communication session, eliminating the need for separate authentication and permission requests. This merging reduces communication overhead and energy consumption while maintaining both security and functional access control.
Solution Approach 2:
The authentication protocol is designed to serve multiple functions: it verifies device identity, checks authorization credentials, and grants or denies access permissions all within the same communication framework. This multi-functional approach eliminates redundant communication steps and reduces the overall communication load on IoT devices with limited resources.
2Reliability
If multiple communication steps are used for authentication and permission verification, then security is enhanced, but bandwidth consumption increases
Solution Approach 1:
The patent merges multiple verification steps into a single communication exchange. The server validates both authentication credentials and permission tokens in one process, reducing the number of message transmissions required. This approach maintains comprehensive security checks while minimizing bandwidth consumption on narrow wireless networks.
3Adaptability or versatility
If separate authentication server and permission server are used, then system functionality is complete, but device complexity increases
Solution Approach 1:
The patent consolidates the roles of authentication server and permission server into a single integrated server system. This unified architecture maintains all necessary security and access control functionalities while simplifying the protocol stack that IoT devices must implement, reducing computational and memory requirements on resource-constrained devices.
Data Source
AI summary
An authentication-permission system includes devices, and a server to generate a private key for each device, and to deliver an extension identifier including an identifier to identify the device and permission information on the device. The server holds the identifier and the permission information on the device; generates the private key for the device from the extension identifier that includes the identifier to identify the device and the permission information; and delivers the generated private key, and the extension identifier to the device. The device executes mutual authentication with another device, by using the extension identifier and the private key of the device, and permits the other device a request to the device, in accordance with the permission information included in the extension identifier of the other device, in response to successful execution of the mutual authentication with the other device.