Memory System Shared Secret Authentication Without ID Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory systems face security vulnerabilities due to the transmission of unique identifiers during verification processes, which can be intercepted or corrupted, exposing the system to cyber-attacks.
Innovation Solution
A secure key exchange operation is used to derive a shared secret between the memory system and a server without transmitting sensitive information, utilizing a Diffie-Hellman key exchange to generate a device identifier and asymmetric key pairs, allowing authentication without direct communication of the device identifier.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If unique identifiers are transmitted during verification processes, then authentication can be performed, but security vulnerabilities increase due to potential interception or corruption
Solution Approach 1:
The patent extracts the sensitive unique identifier from the transmission process by using it only to generate public keys locally. The actual authentication is performed using public keys that can be safely transmitted, while the secret identifier never leaves the device. This separates the identification function from the transmission function.
Solution Approach 2:
The patent introduces public keys as an intermediary between the unique identifier and the authentication process. The unique identifier generates public keys through cryptographic operations, and these public keys serve as the medium for verification. This intermediary allows authentication without exposing the original identifier.
2Reliability
If public keys are used for key exchange, then secure communication is enabled, but computational complexity increases
Solution Approach 1:
The patent performs key generation and public key creation in advance during manufacturing or initialization. The unique identifier is used to generate public keys before any communication occurs, so that during actual authentication, only the pre-computed public keys need to be transmitted and verified, reducing real-time computational burden.
Data Source
AI summary
Methods, systems, and devices for techniques for generating a shared secret for an electronic system are described. A memory system may identify an initial key pair and exchange a public key of the key pair with a public key associated with a server. The memory system and the server may each generate a shared secret. In some cases, the memory system and the server may use the shared secret to generate a device identifier for the memory system, for example by incorporating the device identifier into a cryptographic representation of a software layer of the memory system. The memory system and the server may use the device identifier to generate one or more asymmetric key pairs, which may be used by the server to authenticate the memory system.