OTP Seed Provisioning via Segmented Cryptographic Values
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for secure seed provisioning in authentication systems to ensure privacy and authentication in computer networks, particularly in Wide Area Networks, where existing solutions like RSA SecurID tokens rely on seed access by authentication entities, posing risks if the device-specific value becomes known.
Innovation Solution
A method for managing seed provisioning that allows customers to program a random seed into OTP devices while the vendor issues a digitally signed token record, binding it to the device, ensuring security even if the device-specific value is exposed, by using a unique device value and seed value to generate OTP outputs without compromising the seed's secrecy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the authentication entity has access to the same seed as the token, then authentication verification can be performed, but security is compromised if the device-specific value becomes known
Solution Approach 1:
The seed is segmented into two parts: a device-specific value stored in the token and a vendor-specific value stored securely by the vendor. The authentication entity verifies tokens by combining these segmented parts rather than having direct access to the complete seed, thus maintaining verification capability while reducing security risk from seed exposure.
Solution Approach 2:
A cryptographic hash function acts as an intermediary between the device-specific value and the authentication verification process. The vendor-specific value is derived by hashing the device-specific value, creating a one-way transformation that allows verification without exposing the original seed components.
2Ease of manufacture
If the vendor programs the seed into OTP devices, then device configuration is controlled, but the vendor must know the seed value which compromises security
Solution Approach 1:
The seed configuration process is segmented so that only the device-specific value needs to be programmed into each OTP device during manufacturing, while the vendor-specific value remains securely stored by the vendor. This segmentation allows the vendor to control device configuration without needing to know or store the complete seed value.
Solution Approach 2:
The vendor-specific value is extracted from the complete seed and stored separately by the vendor in a secure key store, while only the device-specific value is programmed into the OTP device. This extraction eliminates the need for the vendor to retain knowledge of the complete seed while maintaining configuration control.
3Object-affected harmful factors
If customers can program random seeds into OTP devices, then seed secrecy is improved, but device binding and licensing control become difficult
Solution Approach 1:
The device binding and licensing control are merged into a single digitally signed token record that combines the device-specific value, vendor-specific value, and licensing information. Customers can program random seeds while the vendor maintains control through digital signatures that bind the device to specific licensing terms without requiring the vendor to know the seed value.
Solution Approach 2:
The vendor performs preliminary actions by creating and digitally signing the token record before the customer programs the device-specific value. This preliminary digital signature binds the device to licensing terms in advance, maintaining control even though the customer ultimately programs the random seed value.
Data Source
AI summary
A method is used in managing seed provisioning. An authentication device having a device value is provisioned with a seed value. The seed value and device value are provided. Based on the seed value and the device value, the method prepares to authenticate the authentication device.