Local Authentication for Communication Devices Using Time-Stamped Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods for networked communication devices are energy inefficient, costly, and vulnerable to security risks, particularly due to the reliance on global positioning technology and battery-powered clocks, which can lead to inaccurate timekeeping and man-in-the-middle attacks.
Innovation Solution
Implementing a local authentication system where networked devices become trusted validation devices, authenticated by an access granting device, allowing them to verify the proximity and authenticity of accessor devices through short-range communication, thereby reducing the need for remote authentication and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If global positioning technology or short-range communication technology (e.g., Bluetooth) is used to verify proximity during authentication, then authentication accuracy is improved, but energy consumption increases significantly and device cost increases
Solution Approach 1:
The patent extracts the time verification function from the battery-powered clock and relocates it to the networked device that has its own internal time source. This eliminates the need for the operable device to maintain an accurate timekeeping system, thereby removing the energy consumption burden from battery-powered clocks while preserving proximity verification capability through time-stamped authentication messages.
Solution Approach 2:
The patent introduces time-stamped authentication messages as an intermediary mechanism to verify proximity without requiring continuous operation of power-intensive components. The time stamps serve as proof of local presence at specific moments, allowing verification of proximity while the device remains in low-power state between authentication events.
2Measurement precision
If global positioning technology or short-range communication technology is included in operable devices, then authentication capability is improved, but device cost increases and device size increases
Solution Approach 1:
The patent extracts the time verification functionality from the operable device and places it in the networked device. This removes the need for expensive and space-consuming global positioning or short-range communication hardware in the operable device, while maintaining authentication capability through time-stamped messages generated by the networked device's own time source.
Solution Approach 2:
Instead of requiring the operable device to have its own time source and verification capability, the patent uses time stamps (a form of information copy) to transfer proximity verification evidence from the networked device to the authentication process, eliminating the need for duplicating expensive hardware components.
3Measurement precision
If battery-powered clocks are used in operable devices, then timekeeping function is provided, but energy consumption increases which may cause the clock to slow or stop
Solution Approach 1:
The patent extracts the timekeeping function from the battery-powered clock in the operable device and relocates it to the networked device. The operable device no longer needs to maintain accurate time itself; instead, it receives time-stamped authentication messages that prove the networked device was locally present at specific times, eliminating continuous battery power requirements for timekeeping.
4Ease of operation
If traditional authentication methods are used without local verification, then authentication process is simpler, but security against man-in-the-middle attacks deteriorates
Solution Approach 1:
The patent applies preliminary action by having the networked device generate time stamps before sending authentication messages. These time stamps serve as pre-prepared proof of local presence that can be verified later, enabling simple authentication processes while maintaining security against man-in-the-middle attacks through cryptographic time verification.
Data Source
AI summary
A device and method for locally authenticating an accessor device to access an operable device. The method comprises receiving reservation information at a validation device from an access granting device, the reservation information identifying one or more accessor devices as having permission to utilize the operable device, where the operable device is local to (e.g., within a predetermined proximity) of the validation device. The method further comprises receiving a request from an accessor device requesting permission to utilize the operable device, the request including an identifier of the requesting accessor device, validating the request based on the reservation information and the identifier, and when validation is successful, granting to the requesting accessor device permission to utilize the operable device. The method may further include receiving an instruction from the access granting device to revoke such permission from the requesting accessor device, and revoking such permission from the requesting accessor device.