Mutual Authentication Protocol for Resource-Constrained Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication protocols, such as IKE, are inefficient for devices with limited processing power, as they do not consider the speed of authentication in their design.
Innovation Solution
A mutual authentication method involving a first entity and a second entity, where each entity verifies and encrypts random numbers using public and private keys, with a limited number of encryptions and decryptions, and uses hash functions to derive session keys for efficient communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If traditional authentication protocols like IKE are used, then authentication security is maintained, but authentication speed deteriorates due to excessive computational requirements for devices with limited processing power
Solution Approach 1:
The authentication protocol is segmented into distinct phases: entity identification, public key verification, random number generation, encryption/decryption operations, and hash verification. Each phase is independently optimized, allowing devices with limited processing power to complete authentication more efficiently while maintaining security requirements.
Solution Approach 2:
The patent modifies cryptographic parameters by limiting the number of encryption and decryption operations to no more than two each, and by using hash functions with controlled input sizes. These parameter changes reduce computational complexity while preserving authentication security, enabling faster authentication on resource-constrained devices.
2Reliability
If multiple encryption and decryption operations are performed during authentication, then security is enhanced, but processing time increases for devices with limited computational power
Solution Approach 1:
The patent applies partial action by limiting cryptographic operations to the minimum necessary for security: no more than two encryptions and no more than two decryptions. This partial approach maintains essential security guarantees while eliminating redundant computational steps that would increase authentication time on resource-constrained devices.
Solution Approach 2:
The patent substitutes heavy mechanical cryptographic operations with more efficient hash function computations. By using hash functions to verify random numbers and authenticate entities, the system replaces computationally intensive encryption/decryption cycles with faster hash-based verification, reducing authentication time while maintaining security.
Data Source
AI summary
Disclosed is a method for mutual authentication between a station, having a digital rights agent, and a secure removable media device. The digital rights agent is configured to initiate mutual authentication by sending a message to the secure removable media device. The secure removable media device is configured to encrypt at least a first random number using a public key associated with the digital rights agent. The digital rights agent is configured to decrypt the encrypted first random number, and encrypt at least a second random number and a first hash based on at least the first random number. The secure removable media device is configured to decrypt the encrypted second random number and the first hash, verify the first hash to authenticate the digital rights agent, and generate a second hash based on at least the second random number. The digital rights agent is configured to verify the second hash to authenticate the secure removable media device.