Lightweight Post-Quantum Authentication With Distributed Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital signature methods are computationally expensive for low-end IoT devices and lack post-quantum security, making them inefficient and vulnerable to quantum computers.
Innovation Solution
A lightweight post-quantum authentication method using a one-time lattice-based signature scheme with distributed verification, where public key generation and verification are handled by semi-honest servers, reducing computational and storage burdens on resource-limited devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional digital signature methods are used, then authentication functionality is provided, but computational cost becomes excessively high for low-end IoT devices
Solution Approach 1:
The signature scheme divides the public key into multiple partial public keys distributed across different servers. The signer only needs to generate and transmit these partial public keys to servers, which then combine them to form the complete public key for verification. This segmentation reduces the computational burden on the signer's device while maintaining authentication functionality.
Solution Approach 2:
The patent introduces servers as intermediary components that handle the computationally intensive operations. The servers receive partial public keys from the signer, combine them to form the complete public key, and perform verification operations. This intermediary approach allows resource-constrained IoT devices to outsource heavy computations to more powerful server infrastructure.
2Reliability
If post-quantum secure digital signatures are implemented, then quantum safety is achieved, but device efficiency deteriorates due to higher computational requirements
Solution Approach 1:
The post-quantum signature scheme segments the public key into partial public keys distributed across servers. The signer generates these partial keys using lightweight operations and transmits them to servers, which then perform the more computationally intensive post-quantum verification operations. This maintains quantum safety while improving device efficiency.
Solution Approach 2:
Servers act as intermediaries that perform the computationally intensive post-quantum verification operations. The signer only needs to perform lighter operations to generate partial public keys and transmit them to servers, significantly improving device efficiency while maintaining post-quantum security through the servers' verification process.
3Reliability
If public key operations are performed locally on IoT devices, then authentication is achieved, but storage requirements become excessively large
Solution Approach 1:
The public key is segmented into multiple partial public keys that are distributed across different servers. Instead of storing a complete large public key locally, the IoT device only needs to store and transmit these smaller partial public keys to servers, significantly reducing storage requirements while maintaining authentication capability.
Solution Approach 2:
Servers serve as intermediaries that hold the complete public keys and perform verification operations. The IoT device only needs to store and transmit partial public keys to these server intermediaries, which then combine them to form the complete public key for verification, thereby reducing the storage burden on the IoT device.
Data Source
AI summary
A method, system, or apparatus for generating and/or verifying a signature on a message is provided. The method, system, or apparatus at a signer may include receiving a message, generating a security parameter, generating at least two seeds corresponding to at least two servers based on the security parameter, transmitting the at least two seeds to each server of the at least two servers, determine a private key based on the security parameter or the at least two seeds, and generating, on the message, a signature based on the private key. The method, system, or apparatus at a verifier may include receiving, from a signer, a signature on a message, obtaining at least two partial public keys, determining a full public key based on the at least two partial public keys, and authenticating the signature on the message based on the full public key. Other aspects, embodiments, and features are also claimed and described.