Lightweight Communication Authentication for Low-Power AIoT Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security authentication solutions in communications systems, particularly for resource-limited devices like AIoT terminals, suffer from poor authentication attributes and high computational overheads, which are not optimized for low-power and zero-power communication scenarios.
Innovation Solution
A communication method and device that utilize a lightweight key derivation architecture and a combined authentication and encryption algorithm, such as ASCON-AEAD, to generate and transmit authentication information based on shared keys, service-related information, and random numbers, reducing computational overheads and optimizing energy consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security authentication protocols are used, then authentication security is maintained, but computational overhead increases and energy consumption rises
Solution Approach 1:
The authentication process is segmented into distinct phases: key generation from shared secrets, separate authentication information generation, and encrypted message transmission. This segmentation allows each component to be optimized independently for resource-constrained devices while maintaining overall security.
Solution Approach 2:
The patent changes the parameters of the authentication protocol by using lightweight cryptographic operations instead of traditional heavy protocols. The key derivation function and authentication information generation use optimized parameters suitable for low-power devices, reducing computational overhead while maintaining security equivalence.
2Reliability
If traditional security authentication protocols are used, then authentication functionality is provided, but device complexity and computational overhead increase
Solution Approach 1:
The patent merges key generation, authentication information creation, and message encryption into a unified lightweight framework. By combining these functions into a single streamlined process using algorithms like ASCON-AEAD, the system reduces the number of separate computational operations required compared to traditional protocols that handle each function separately.
Solution Approach 2:
The patent substitutes traditional heavy cryptographic mechanisms with lightweight alternative mechanisms. Instead of using computationally intensive algorithms like RSA or ECC for authentication, the system employs lightweight symmetric cryptography and hash functions that provide equivalent security with significantly reduced computational requirements for resource-constrained devices.
3Reliability
If separate authentication and encryption operations are performed, then security is maintained, but energy consumption and processing time increase
Solution Approach 1:
The patent merges authentication and encryption into a single unified operation using authenticated encryption algorithms such as ASCON-AEAD. This combination allows the device to simultaneously provide both authentication and confidentiality protection in one computational pass, eliminating the need for separate processing steps and thereby reducing overall processing time and energy consumption.
Data Source
AI summary
Provided are communication methods and communication devices. One method comprises: on the basis of a shared key, a first device generates a first key; the first device receives a second random number of a second device; on the basis of the first key, the first device generates first authentication information of the first device; and the first device sends a first message to the second device, the first message comprising the first authentication information, and the first authentication information being generated according to one or more of the following information: device information, service-related information, an identifier of a device forwarding the first message, and a first random number and a second random number of the first device.