Owner Token Verification for Cyber-Physical System Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cyber-physical systems, the risk of unauthorized access and information leakage exists due to attackers obtaining device certificates, allowing them to register unauthorized connection destinations, leading to potential unauthorized control and information leakage.
Innovation Solution
An information processing apparatus that includes a token issuer, storage for user and ownership registration information, a token acceptor, and an owner verifier to perform verification, ensuring only the proper owner can connect devices to specified servers, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device certificates are stored in the registrar for authentication, then device authentication is enabled, but unauthorized access and information leakage occur when attackers obtain the certificates
Solution Approach 1:
The patent segments the authentication process into two independent parts: device certificates for device authentication and owner tokens for ownership verification. This separation ensures that even if device certificates are compromised, attackers cannot perform unauthorized operations without the additional owner token verification layer.
Solution Approach 2:
The patent implements preliminary owner verification through token issuance before allowing any connection operations. The registrar verifies device ownership by checking owner tokens before permitting connection destination registration or modification, preventing unauthorized access even when device certificates are stolen.
2Adaptability or versatility
If the registrar allows flexible device connection to CPS servers, then system adaptability is improved, but security risks increase when attackers register unauthorized connection destinations
Solution Approach 1:
The patent introduces owner tokens as an intermediary verification mechanism between the device and the registrar. Before allowing flexible connection operations, the registrar acts as an intermediary that verifies device ownership through token validation, enabling adaptability while preventing unauthorized control.
Solution Approach 2:
The patent implements feedback control through the connection destination notification process. When a device requests to connect to a CPS server, the registrar verifies ownership via owner token, then notifies the connection destination server. This feedback loop ensures that only authorized devices can establish connections, maintaining security while allowing flexible device-server pairing.
3Productivity
If the registrar stores connection destination information in advance, then authentication efficiency is improved, but security vulnerabilities arise when connection information is compromised
Solution Approach 1:
The patent transforms the static pre-stored connection information model into a dynamic verification model. Instead of relying solely on pre-stored connection data, the system dynamically verifies device ownership through owner tokens at the time of connection requests, maintaining authentication efficiency while significantly improving connection security.
Data Source
AI summary
According to one embodiment, an information processing apparatus, includes: a first token issuer issuing a first token in response to a token issuance demand from a user; a first storage storing information on the user and the first token; a second storage storing ownership registration information of a device owned by the user; a first token acceptor accepting the first token provided from the device; an owner verifier to perform owner verification including verifying whether information on the device providing the first token is stored in the second storage and whether the first token accepted by the first token acceptor matches with the first token in the first storage, and determine the user corresponding to the first token for which the owner verification succeeds as an owner of the device; and a third storage storing verified data including information on the device for which the owner is determined.