IoT Mutual Authentication Using Local ECC Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication mechanisms for internet of things (IoT) devices with constrained resources are vulnerable to network attacks due to resource limitations, leading to security breaches and high susceptibility to unauthorized access.
Innovation Solution
A data transmission method utilizing an authentication key generated based on a security credential distributed by an authentication center, enabling decentralized authentication without the need for key transmission between devices, and employing elliptic curve cryptography for secure key generation and management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric key encryption is used for authentication, then authentication can be performed between devices, but the shared key is easy to be obtained and transmitted, resulting in network attacks
Solution Approach 1:
The patent extracts the authentication key from the transmission process entirely. Instead of transmitting the authentication key between devices, each device independently generates the authentication key locally using its private key and the other device's public key. This eliminates the security vulnerability of key transmission while maintaining authentication functionality.
2Reliability
If asymmetric key encryption is used for authentication, then authentication security is improved, but certificates and public keys occupy large network bandwidth and more storage resources
Solution Approach 1:
The patent changes the parameters of key generation by using elliptic curve cryptography instead of traditional asymmetric encryption. This provides equivalent security with significantly smaller key sizes, reducing both storage requirements and network bandwidth consumption while maintaining the security benefits of asymmetric encryption.
3Reliability
If asymmetric key encryption is used for authentication, then authentication security is improved, but certificates and public keys occupy large network bandwidth
Solution Approach 1:
The patent employs elliptic curve cryptography which generates compact public keys and signatures. This dramatically reduces the bandwidth required for transmitting authentication data compared to traditional asymmetric encryption schemes, while maintaining equivalent or superior security levels.
4Reliability
If conventional authentication mechanisms are used on IoT devices, then authentication can be performed, but the devices with constrained resources cannot support them, making the network vulnerable to attacks
Solution Approach 1:
The patent uses elliptic curve cryptography which provides high security with small key sizes and efficient computational requirements. This makes the authentication mechanism suitable for resource-constrained IoT devices while maintaining strong security guarantees.
Data Source
AI summary
A method includes: generating an authentication key based on a security credential distributed by an authentication center. Mutual authentication is performed between devices based on authentication code, where that authentication code is generated based on the authentication key. Encrypted data is obtained by encrypting with an encryption key.