Mutual Authentication Protocol Reducing Communication Overhead
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cryptographic communication technologies, such as SSL/TLS, require multiple communications steps for mutual authentication, leading to increased authentication time and overhead before data communication can begin.
Innovation Solution
A mutual authentication method that involves generating and exchanging encrypted data and verification data using public and private keys associated with identification information, reducing the number of communication steps by transmitting encrypted data and verification data in a specific order to expedite the authentication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple communication steps are performed for mutual authentication in cryptographic communication, then authentication security is ensured, but authentication time increases and overhead before data communication begins
Solution Approach 1:
The patent combines the authentication data and verification data into a single communication message. The authentication apparatus transmits both the authentication data (containing identification information and encrypted data) and the verification data (hash value) together in one communication step, rather than requiring separate back-and-forth exchanges. This merging reduces the number of communication steps while maintaining the security verification process.
2Reliability
If multiple communication steps are performed for mutual authentication, then authentication security is ensured, but overhead before data communication increases
Solution Approach 1:
The patent merges multiple data elements into consolidated communication messages. The authentication data combines identification information with encrypted data, and this is transmitted together with verification data in a single communication exchange. This consolidation reduces the number of separate messages and communication steps required, thereby reducing protocol overhead and complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A first device generates first encrypted data from a second public key corresponding to second ID regarding a second device and a first random number and transmits first ID regarding the first device, second ID, and first encrypted data. The second device generates second encrypted data from a first public key corresponding to the first ID and a second random number, generates second verification data by generating a second shared-key candidate from the second random number, the first encrypted data, and a second private key, and transmits the second encrypted data and second verification data. The first device generates first verification data by generating a first shared-key candidate from the first random number, the second encrypted data, and a first private key and transmits the first verification data. The first and second devices examine the second and first verification data by using the first and second shared-key candidates, respectively.