IoT Identity Tags with Open Registry Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identification methods for physical assets are not machine-readable, insecure, and rely on third-party-controlled systems that can be hacked or fail, lacking seamless ownership migration and authenticity verification.
Innovation Solution
A system using wireless tamperproof tags with private keys and unique identifiers, coupled with an open registry database like blockchain, allowing for secure authentication and chain of ownership storage without relying on third-party services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If third-party-controlled identification systems are used, then authentication can be performed, but the system is vulnerable to hacking and third-party failure
Solution Approach 1:
The identification tag system enables self-authentication through cryptographic key pairs stored on the tag itself. The private key remains on the tag while the public key is registered in a distributed ledger, allowing the tag to prove its identity without relying on third-party verification services. This eliminates the vulnerability to third-party hacking while maintaining authentication capability.
Solution Approach 2:
A distributed ledger blockchain serves as an intermediary that stores public keys and ownership information in a decentralized manner. Instead of relying on a single third-party controller, the system uses a distributed network of nodes to verify and store authentication data, making the system resistant to single-point failures and centralized hacking targets.
2Reliability
If private databases are used to store identification data, then ownership information can be maintained, but users cannot seamlessly migrate their identity to other systems
Solution Approach 1:
The identification tag uses standardized cryptographic protocols and a distributed ledger that can be accessed by multiple different systems and platforms. The public key registered on the blockchain serves as a universal identifier that can be recognized across different applications and systems, enabling seamless identity migration without being locked into a single proprietary database.
Solution Approach 2:
The authentication capability is extracted from proprietary database systems and embedded directly in the identification tag through cryptographic key pairs. The essential identity information (public key) is stored in a portable, system-independent format on the distributed ledger, allowing users to transfer their identity across different platforms without relying on specific third-party databases.
3Ease of manufacture
If obfuscation methods are used to prevent tag duplication, then some security is provided, but these methods can be hacked
Solution Approach 1:
Physical obfuscation methods are replaced with cryptographic authentication mechanisms. Instead of relying on physical tag features that can be copied or obscured, the system uses mathematical cryptography with private keys stored securely on the tag and public keys verified through digital signatures on the blockchain, providing robust anti-forgery protection that cannot be replicated by physical copying.
Solution Approach 2:
The system transitions from physical/tag-based security parameters to cryptographic parameter security. The security strength is determined by cryptographic key lengths and algorithms rather than physical tag characteristics, allowing for mathematically proven security levels that are resistant to copying and forgery attempts.
4Device complexity
If third-party controlled systems are used, then centralization simplifies management, but the system lacks resilience when the third party dissolves or goes out of business
Solution Approach 1:
The centralized third-party control is segmented into a distributed network of nodes maintaining the blockchain. Management functions are distributed across multiple independent entities rather than concentrated in a single organization, ensuring system continuity even if any individual participant dissolves or fails. The cryptographic protocols maintain system coherence without requiring centralized coordination.
Data Source
AI summary
An identity system for the Internet of Things (IOT) that enables users and machines to identify, authenticate and interact with products and collectibles without relying on a third-party-controlled authentication service. The system includes wireless tamperproof tags coupled to products and an open registry database where a chain of ownership of the items is able to be stored. The open registry enables public access to the item identity and data combined with item registration anonymity.


