Network Authentication via Random String Check Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption systems for short-range wireless communication, such as asymmetric and symmetric encryption, face issues with speed, key management, and vulnerability to unauthorized key exchanges, particularly in ad-hoc scenarios without a certificate authority.
Innovation Solution
A method that uses short unique random strings to calculate check codes in both network entities, allowing for secure data transmission by comparing these codes, thereby authenticating key agreements without requiring long and complex encryption keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric encryption (public key infrastructure) is used for secure key exchange, then security is improved, but encryption speed deteriorates and system complexity increases
Solution Approach 1:
The patent performs asymmetric encryption in advance during connection establishment to exchange public keys and establish a shared secret key. This preliminary action allows the system to switch to faster symmetric encryption for subsequent data transmission, thus improving overall encryption speed while maintaining security.
Solution Approach 2:
The patent introduces a shared secret key as an intermediary that is established through asymmetric encryption but then used for symmetric encryption. This intermediary mechanism combines the security benefits of asymmetric encryption with the speed advantages of symmetric encryption for actual data transmission.
2Reliability
If asymmetric encryption with certificates is used for authentication, then security is improved, but device complexity increases due to certificate management requirements
Solution Approach 1:
The patent extracts the essential authentication function from the complex certificate authority infrastructure and implements a simplified mutual authentication mechanism using exchanged public keys and shared secrets. This removes the need for external certificate authorities while maintaining authentication security.
Solution Approach 2:
The patent enables devices to authenticate each other autonomously using their own public keys and the shared secret established during connection setup. This self-service authentication mechanism eliminates dependency on external certificate management infrastructure, reducing device complexity.
3Reliability
If manual entry of long encryption keys is required for secure communication, then security is improved, but ease of operation deteriorates due to increased error probability
Solution Approach 1:
The patent replaces the manual mechanical entry of long encryption keys with an automated electronic key exchange system using public key cryptography. The system automatically generates, transmits, and stores cryptographic keys through digital communication channels, eliminating manual typing errors while maintaining strong security through mathematically robust key lengths.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
A method for authenticating a data agreement between first and second network entities can include the first network entity committing to the agreed data value, and transmitting the committed data value and a first random value to the second network entity. The first network entity can receive a second random value, and can then open the committed data value such that the second network entity can check the committed data value. If successful, the second network entity can calculate a third check string, and the first network entity can similarly calculate a fourth check string, based upon the data value and the first and second random values. The first network entity can calculate the fourth check string without the second network entity committing to the data value. The method can then include comparing the check strings such that the agreed data can be considered authenticated based upon the comparison.