Lone Worker Terminal Authentication Using Token-Based Certificates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for authenticating lone worker terminals with remote servers are vulnerable to impersonation and require repetitive password entry, compromising security and efficiency.
Innovation Solution
A method involving the generation of a unique token with a digital key pair, certification, and authentication using asymmetric encryption to secure the connection between the terminal and the remote server without requiring passwords.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If password-based authentication is used, then the authentication process is simple to implement, but security is compromised due to password sharing and interception risks
Solution Approach 1:
The patent replaces the mechanical/password-based authentication system with a cryptographic system using asymmetric encryption. The terminal and server exchange public keys and verify signatures mathematically, eliminating the need for passwords while providing stronger security against interception and sharing risks.
Solution Approach 2:
The authentication mechanism changes from using secret passwords to using public-key cryptography parameters. Each terminal generates unique key pairs, and authentication is performed through cryptographic signatures and certificate verification, fundamentally changing the authentication parameters from shared secrets to individual cryptographic identities.
2Device complexity
If password-based authentication is used, then the authentication mechanism is straightforward, but operational efficiency deteriorates due to repetitive password entry
Solution Approach 1:
The patent implements preliminary authentication during terminal initialization or first connection, where the terminal's identity is verified and a digital certificate is issued. This one-time setup eliminates the need for repetitive authentication actions, as the certificate serves as permanent proof of identity for subsequent connections.
Solution Approach 2:
The terminal's identity is copied into a digital certificate that can be presented repeatedly without degradation. Instead of requiring the terminal to repeatedly provide secret credentials, the authenticated identity is replicated in the certificate, which can be efficiently transmitted and verified multiple times.
3Reliability
If digital certificate authentication is implemented, then security is enhanced through asymmetric encryption, but device complexity increases
Solution Approach 1:
The patent introduces a certificate authority (the server) as an intermediary that issues and verifies digital certificates. This intermediary manages the complexity of key pair generation and certificate issuance centrally, allowing terminal devices to use simpler authentication logic of presenting their certificate and private key signature rather than implementing full cryptographic protocol stacks.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for certifying a terminal (1) for a lone worker with a remote server (2), comprising the following steps: - generation (31) of a unique token, comprising a first digital key, - transmission (32) of the unique token, - generation (33) of a private key of the terminal and a public key of the terminal, - transmission (35) of a message comprising the identifier of the terminal, the public key of the terminal and an authentication code, the authentication code being calculated using the first digital key and an input data formed by at least part of the message, - verification (36) of the validity of the authentication code using the first digital key, - generation (37) of a digital certificate comprising the identifier of the terminal, the public key of the terminal and a signature created using a second digital key.