Message Timing Authentication Against Man-in-the-Middle Extenders
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for networked devices are energy-inefficient, costly, and vulnerable to security risks such as inaccurate clocks and man-in-the-middle attacks, particularly in devices lacking global positioning or short-range communication capabilities.
Innovation Solution
A local authentication system where trusted validation devices, pre-authorized by an access granting device, verify the proximity and authenticity of accessor devices using short-range communication and cryptographic certificates, enabling efficient and secure access to operable devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If global positioning technology or short-range communication technology is used for authentication, then authentication accuracy and security are improved, but device cost and power consumption increase significantly
Solution Approach 1:
The patent introduces a validation device as an intermediary component that performs authentication functions. Instead of equipping every operable device with expensive GPS or Bluetooth capabilities, the validation device acts as a mediator between the accessor device and the operable device, providing authentication services remotely and reducing the computational and energy burden on battery-powered operable devices.
Solution Approach 2:
The authentication functionality is extracted from the operable device and relocated to a separate validation device. This extraction allows the operable device to remain simple and energy-efficient while still benefiting from secure authentication, as the complex authentication logic resides in the validation device rather than being embedded in every operable device.
2Reliability
If global positioning or short-range communication capabilities are included in operable devices, then authentication reliability is improved, but device cost and space requirements increase
Solution Approach 1:
The validation device serves as an intermediary that centralizes authentication capabilities. Rather than incorporating complex positioning and communication modules into each operable device, the system uses the validation device as a mediator that handles these complex functions remotely, simplifying the operable device architecture.
Solution Approach 2:
The validation device provides universal authentication services to multiple operable devices without requiring each operable device to have its own specialized authentication hardware. This multi-functional approach allows a single validation device to serve multiple purposes across different operable devices, reducing overall system complexity.
3Ease of operation
If batteries are used to power operable devices, then portability is enabled, but power draw from excessive authentication technologies may cause the clock to slow or stop
Solution Approach 1:
The validation device acts as an intermediary that performs authentication remotely, eliminating the need for continuous high-power authentication operations at the operable device. This reduces the cumulative power draw from authentication activities, preventing battery depletion that would otherwise cause the clock to slow or stop.
Solution Approach 2:
Authentication decisions are made in advance at the validation device before the operable device needs to execute the authentication. This preliminary action reduces the computational load and power consumption at the operable device during actual authentication events, preserving battery power for essential functions like the clock.
4Reliability
If man-in-the-middle attacks are prevented through traditional authentication methods, then security is improved, but authentication speed and efficiency are reduced
Solution Approach 1:
The validation device serves as a trusted intermediary that pre-authORIZES access before the actual authentication event. This preliminary validation reduces the complexity and time required for subsequent authentication operations at the operable device, enabling faster authentication while maintaining security through the trusted intermediary's pre-clearance.
Data Source
AI summary
A method of determining whether a received message at a communications device is from a legitimate second device may include building a message intended for a legitimate second device, generating a time delay using a secret key known to the device and the legitimate second device, sending the built message to the legitimate second device, starting a timer at the time of sending the built message, receiving a response to the sent message, determining a response time of the received response based on a time value of the timer, determining an acceptable receive window of time based on the generated time delay, determining whether the determined response time is within the determined acceptable receive window of time, and when the determined response time is within the determined acceptable receive window of time, recognizing the received response as a legitimate message from the legitimate second device.