Multi-Device Authentication via Merged Credential Messages

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional authentication methods, such as try-fail-try sequences, increase network resource usage and slow down the authentication process by requiring additional communications when username and password pairs do not match initially, especially in peer-to-peer and client-server contexts.

Innovation Solution

A method where a computing device generates a message using first and second secret data for authenticating to multiple devices, allowing simultaneous authentication by comparing local information with received information, reducing unnecessary network communications and improving efficiency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a try-fail-try sequence is used to authenticate a source peer by providing username and password pairs for each target peer, then authentication can be performed, but additional communications over the network are required and the authentication process slows down

Engineering Contradiction:
ImproveauthenticationVSAvoidauthentication speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent combines multiple authentication operations into a single message. Instead of separately authenticating to each target peer through multiple try-fail-try sequences, the source peer creates one message containing username-password pairs for all target peers and sends it once. This merging of operations reduces network communications and accelerates authentication while maintaining reliability.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The single message serves multiple functions simultaneously - it contains authentication credentials for multiple target peers, allowing the source peer to authenticate to all of them through one communication. This multi-functionality eliminates the need for separate authentication attempts for each target peer.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If a try-fail-try sequence is used to authenticate a source peer by providing username and password pairs for each target peer, then authentication can be performed, but usage of network resources increases

Engineering Contradiction:
ImproveauthenticationVSAvoidnetwork resource usage
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent merges multiple authentication messages into a single message that contains username-password pairs for all target peers. This consolidation reduces the total number of network communications required, thereby decreasing network resource usage and energy consumption while maintaining authentication reliability.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The source peer prepares all username-password pairs for all target peers in advance and includes them in a single message before authentication begins. This preliminary preparation eliminates the need for multiple separate authentication attempts, reducing network resource consumption.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8839357B2Method, system, and computer-readable storage medium for authenticating a computing device
Publication Date: 2014.09.16 CANON USA INC
  • US8839357B2 patent drawing
  • US8839357B2 patent drawing
  • US8839357B2 patent drawing

AI summary

A method, system, and computer-readable storage medium for authenticating a computing device are provided. According to embodiments of the invention, a first computing device generates a message using first secret data and second secret data, the first secret data for authenticating to a second computing device, the second secret data for authenticating to a third computing device. The first computing device sends the message to the second computing device. In some embodiments, challenge-response authentication is implemented. For example, the first computing device receives a challenge from the second computing device and generates the message based at least in part on the challenge. The second computing device compares local information with information received from the first computing device. The first computing device can thereby be authenticated to the second computing device. Furthermore, the first computing device can be authenticated to the third computing device by a similar process.