IoT Authentication Using Segmented Parameter Files and Timed IDs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing authentication methods for IoT devices are vulnerable to unauthorized access due to the reuse of passwords and lack of sufficient security, making it difficult to prevent spoofing and ensuring authenticity between IoT devices and server devices.
Innovation Solution
An information processing system that includes a server device and a terminal device capable of communicating via a network, where the server provides a parameter file with a unique identifier and connection destination information, and the terminal device requests and transmits a timed identification number for authentication, ensuring the authenticity of the terminal device using the identifier and timed identification number.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication using identification information and password is used, then the authentication process is simple, but the security is insufficient and vulnerable to spoofing
Solution Approach 1:
The authentication process is segmented into multiple stages: first authentication using identification information and password, then second authentication using a one-time code. This multi-stage segmentation enhances security by requiring both static credentials and dynamic verification, making spoofing attacks more difficult while maintaining a manageable complexity through clear procedural separation.
Solution Approach 2:
The server performs preliminary authentication using identification information and password before issuing a one-time code for second authentication. This preliminary action establishes a baseline security level and enables the subsequent one-time code mechanism, creating a layered defense that improves overall reliability without requiring the entire system to be complex.
2Ease of operation
If password reuse is allowed for convenience, then the ease of operation is improved, but the security vulnerability increases
Solution Approach 1:
The authentication system transitions from static password-only authentication to a dynamic two-stage process where a one-time code is generated and valid only for a single authentication attempt. This dynamic element eliminates password reuse vulnerabilities while maintaining user convenience through automated code delivery and straightforward verification procedures.
Solution Approach 2:
The system changes the authentication parameter from a reusable static password to a non-reusable one-time code with limited validity. This parameter transformation fundamentally addresses security vulnerabilities associated with password reuse while preserving ease of operation through automated code generation and validation processes.
3Reliability
If third-party authentication is used to ensure security, then the authentication reliability is improved, but the cost and complexity increase
Solution Approach 1:
The server performs self-authentication by issuing and validating one-time codes without requiring external third-party authentication services. This self-service approach maintains high security reliability through cryptographic verification while reducing system complexity by eliminating dependencies on external authentication authorities and simplifying the architectural structure.
Data Source
AI summary
To provide an authentication technique having higher security between IoT devices and server devices or between IoT devices.The server device provides, to the terminal device, a parameter file including a predetermined identifier for uniquely identifying a relationship between the terminal device and the server device, and connection destination information regarding a connection destination of the server device, the terminal device accesses the server device specified by the connection destination information in the parameter file, requests issuance of a timed identification number, and transmits the identifier and the timed identification number to the server device when connecting to the server device specified by the connection destination information in the parameter file, and the server device authenticates the terminal device using the identifier, and confirms an authenticity of the terminal device using the timed identification number.