Lightweight Authentication Protocol for Resource-Constrained Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Resource-constrained devices face challenges in authentication due to poor computation capability and memory, making them vulnerable to man-in-the-middle attacks and requiring inefficient methods that are not secure.
Innovation Solution
A lightweight authentication method using modified secret keys and blinding values, where a server and client exchange messages with error values to determine successful authentication, minimizing memory and computation requirements while enhancing security against man-in-the-middle attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional authentication methods (symmetric/public key encryption) are used, then security is improved, but computation capability and memory requirements increase beyond what resource-constrained devices can handle
Solution Approach 1:
The patent changes the parameters of the authentication protocol by replacing complex encryption operations with simplified logic operations (XOR, AND, OR) and hash functions. The secret keys are transformed into modified secret keys through blinding values, allowing authentication to proceed with reduced computational complexity while maintaining security based on the LPN problem's mathematical dilemma.
Solution Approach 2:
The patent employs lightweight authentication tokens and temporary blinding values that are discarded after each authentication session. These disposable elements replace long-term complex cryptographic keys, enabling resource-constrained devices to perform authentication without requiring substantial memory capacity or computation power.
2Device complexity
If lightweight authentication methods are used to reduce computation and memory requirements, then device resource efficiency is improved, but vulnerability to man-in-the-middle attacks increases
Solution Approach 1:
The patent introduces blinding values as intermediary elements that mask the actual secret keys during authentication exchanges. These blinding values prevent man-in-the-middle attackers from directly observing or manipulating the secret keys, while still allowing the legitimate parties to verify authentication through the error value calculation based on the LPN problem.
Solution Approach 2:
The patent applies preliminary anti-action by pre-processing the secret keys with blinding values before transmission. This pre-protection measure counteracts potential man-in-the-middle attacks by ensuring that even if authentication messages are intercepted, the underlying secret keys remain protected through the mathematical dilemma of the LPN problem, which requires substantial computational resources to solve.
3Reliability
If mathematical dilemma-based authentication (LPN problem) is used, then theoretical security is improved, but vulnerability to man-in-the-middle attacks remains
Solution Approach 1:
The patent introduces asymmetry through the use of blinding values that are known to the legitimate parties but appear random to potential attackers. This asymmetric protection layer combines with the inherent asymmetry of the LPN problem, creating a multi-layered security approach where the mathematical dilemma provides theoretical security while the blinding mechanism prevents direct observation and manipulation by man-in-the-middle attackers.
Data Source
AI summary
A system and method for authenticating a resource-constrained client are provided. The method includes transmitting, by the server, a query message including a first modified secret key to the client, wherein the first modified secret key is generated using a first secret key and a first blinding value; receiving, from the client, a response message including a response value, wherein the response value is generated using the first blinding value, a second secret key, and an error value; calculating the error value from the response value; and determining, based on the error value, whether authentication of the client is successful.