IoT Device Multi-Factor Authentication Using Neighbor Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for authenticating Internet of Things (IoT) devices rely on single-factor authentication, such as traditional username and password, which lacks the security provided by multi-factor authentication, and are susceptible to unauthorized manipulation, particularly in approaches using time-based passwords.
Innovation Solution
The method involves obtaining identity credentials from neighboring IoT devices to generate a second factor credential during a multi-factor authentication process, where the IoT device is paired with neighboring devices in a trust state and uses these credentials to create a second factor credential, which is verified by an authentication system to ensure secure authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If single-factor authentication (username and password) is used for IoT device authentication, then the authentication process is simple and easy to implement, but the security level is insufficient and susceptible to unauthorized manipulation
Solution Approach 1:
The authentication process is segmented into multiple independent factors: first factor (username/password), second factor (time-based password generated from identity credentials), and third factor (device identity). Each factor is obtained and verified separately, creating a multi-layered security approach that maintains simplicity at each stage while achieving high overall security.
Solution Approach 2:
Identity credentials are obtained from neighboring IoT devices in advance during a trust state establishment phase. These pre-obtained credentials are then used to generate the second factor credential when authentication is needed, eliminating the need for real-time complex computations and maintaining both security and simplicity during the actual authentication process.
2Reliability
If time-based passwords are used for authentication, then the authentication process becomes more secure, but the system becomes susceptible to unauthorized manipulation
Solution Approach 1:
A trusted intermediary authentication system is introduced that verifies the second factor credential against pre-stored identity credentials from neighboring devices. This intermediary layer prevents direct manipulation of time-based passwords by attackers, as the authentication system mediates the verification process and compares credentials against trusted sources rather than accepting user-provided values directly.
Solution Approach 2:
The authentication system provides feedback by verifying the generated second factor credential against the pre-obtained identity credentials and confirming whether authentication succeeds or fails. This feedback mechanism ensures that any manipulation attempts are detected and rejected, as the system continuously validates credentials against the trusted database of neighboring device identities.
3Reliability
If multi-factor authentication is implemented for IoT devices, then security is enhanced, but the authentication process becomes more complex
Solution Approach 1:
The IoT device automatically obtains identity credentials from neighboring devices and generates the second factor credential without requiring manual user input for each factor. The device performs self-authentication by autonomously collecting credentials, generating the time-based password, and submitting it to the authentication system, which simplifies the user experience while maintaining multi-factor security.
Solution Approach 2:
The authentication system is designed to handle multiple authentication factors through a unified process. The same authentication interface and verification mechanism accommodate the first factor (username/password), second factor (time-based password), and third factor (device identity), making the system universally applicable and easy to operate despite the multiple security layers.
Data Source
AI summary
A computer-implemented method, system and computer program product for utilizing multi-factor authentication to authenticate an Internet of Things (IoT) device. The identity credentials of neighboring IoT device(s) are obtained by the IoT device to be authenticated. Upon providing a request to the authentication system to prove its identity, the IoT device provides the authentication system a first factor credential, such as a username and password. The authentication system, upon confirming the accuracy of the first factor credential, challenges the IoT device to provide the second factor credential. After receiving the challenge from the authentication system to provide the second factor credential, the IoT device returns the second factor credential that was generated based on the obtained identity credentials from the neighboring IoT device(s). Upon determining that the received second factor credential includes the identity credentials from the minimum number of required neighboring IoT devices, the authentication system approves authentication.