Mutual Device Attestation via Near-Field Certificate Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device attestation methods are inadequate for multi-device environments where electronic devices need to verify each other's security levels without server intervention, necessitating a method for mutual attestation between devices.
Innovation Solution
Electronic devices equipped with a communication module for near-field wireless communication generate private and public keys using random functions, create certificates based on these keys, and exchange them to mutually attest security levels, verifying hardware and software integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If server-based device attestation is used, then device security verification is achieved, but system complexity and dependency on external servers increase
Solution Approach 1:
The patent implements mutual attestation where electronic devices verify each other's security levels autonomously without requiring external server intervention. Each device generates its own attestation certificate using its private key and verifies other devices' certificates using their public keys, enabling self-service security verification that reduces system complexity and external dependencies while maintaining reliability
Solution Approach 2:
The patent introduces digital certificates as an intermediary mechanism that enables secure peer-to-peer verification. Instead of direct complex server-based verification, simplified certificate exchange acts as the mediator, allowing devices to prove their security levels through standardized certificate protocols while maintaining server-independent operation
2Reliability
If mutual attestation is implemented between devices, then security level verification is achieved, but communication overhead and key exchange complexity increase
Solution Approach 1:
The patent applies preliminary action by having devices generate and store their private keys and attestation certificates in advance during manufacturing or initial setup. These cryptographic credentials are pre-configured in the device's secure storage, eliminating the need for complex real-time key generation and exchange during mutual attestation operations, thus reducing communication overhead while maintaining verification reliability
Data Source
AI summary
An electronic device is provided. The electronic device includes a communication module for supporting near-field wireless communication, memory, and at least one processor operatively connected to the communication module and the memory. The memory stores one or more programs including instructions that, when executed by the at least one processor, may cause the electronic device to establish near-field wireless communication connection with an external device through the communication module, generate a first private key by using a determined random function, generate a first public key based on the first private key, generate a first certificate including a security level of the electronic device with respect to the first public key, and transmit the generated first certificate to the external device through the communication module.