IP Communication Authentication via Disposable One-Time Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IP networks face challenges in authenticating communication devices due to spoofing, where fake source IP addresses can disguise as genuine, leading to insecure data transmission, and existing solutions require complex and costly systems for password exchange or encryption.
Innovation Solution
A method where a receiving-side communication device generates a new authentication code under specific conditions, sends it to the originating-side device, and overwrites it on the originating-side device's storage, ensuring only genuine devices are authenticated by verifying the presence of the authentication code in packets, thereby excluding spoofing without the need for synchronous password generation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional password exchange or encryption methods are used to prevent spoofing, then communication security is improved, but system complexity and cost increase
Solution Approach 1:
The patent uses disposable one-time authentication codes that are generated and consumed in single use. Each authentication code is valid only once and is discarded after verification, eliminating the need for complex key management systems while maintaining security. This approach replaces expensive, complex encryption infrastructure with simple, disposable authentication tokens.
2Reliability
If synchronous password generation between communication devices is implemented, then authentication reliability is improved, but system complexity and synchronization requirements increase
Solution Approach 1:
Instead of having both devices generate passwords synchronously, the patent inverts the approach: the receiving device generates the authentication code and sends it to the originating device. This eliminates the need for complex synchronization mechanisms while maintaining authentication reliability, as the code is generated unilaterally and then verified by the other party.
3Adaptability or versatility
If authentication codes are transmitted through multiple relay devices in IP networks, then network connectivity is improved, but vulnerability to spoofing increases
Solution Approach 1:
The patent performs authentication before actual data communication begins. The receiving device generates and sends an authentication code to the originating device before any data packets are exchanged. This preliminary authentication step ensures that even if packets pass through multiple relay devices, the originating device's identity is verified in advance, preventing spoofing attacks.
Data Source
AI summary
In IP communication, an authentication code AC1 uniquely generated by a receiving-side communication device 1b is sent to an originating-side communication device 1a (S1, S2), and stored in the originating-side communication device (S3). Packets in which the stored authentication code is embedded are sent to the receiving-side communication device 1b on connection from the originating-side communication device 1a to the receiving-side communication device 1b (S4), and it is determined at the receiving-side communication device whether the originating-side communication device is true or false depending on if the authentication code sent from the receiving-side communication device is contained in the packets received from the originating-side communication device or not (S5).