Partial Authentication Code Generation for Beacon Message Integrity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for authenticating and protecting the integrity of message contents, particularly in beacon systems, lack sufficient security and efficiency, especially for transmitters with limited resources, as they rely on weak authentication codes and insufficient cryptographic protection.

Innovation Solution

A method that calculates partial authentication codes from a repeating message content, which are then combined to form a stronger authentication code, ensuring the integrity and authenticity of messages by incrementally increasing security with each received message, even in resource-constrained transmitters.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If weak authentication codes are used in beacon systems, then device complexity is reduced, but security and integrity protection are insufficient

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication code complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication code is divided into multiple partial authentication codes, each calculated from different sections of the repeating message content. This segmentation allows the system to achieve strong security without requiring a single complex authentication code, as each partial code can be computed independently using simpler cryptographic operations.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Multiple partial authentication codes are combined to form a complete authentication code. By merging the results of multiple simpler authentication operations, the system achieves the security strength of a complex authentication code while maintaining the simplicity of individual partial codes.

Inventive Principle:
Principle #5Merging (Combining)

2Reliability

If cryptographic protection is enhanced, then message integrity is improved, but computational resources required increase

Engineering Contradiction:
Improveintegrity protectionVSAvoidcomputational resources
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

Instead of calculating a single comprehensive authentication code requiring full computational resources, the system calculates multiple partial authentication codes from different message sections. This partial action approach provides sufficient integrity protection while reducing the computational burden on resource-constrained transmitters.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The authentication codes are calculated continuously as messages are received, with each new message contributing additional partial authentication codes. This continuous process incrementally strengthens the authentication without requiring a single large computational burst, making it suitable for resource-constrained devices.

Inventive Principle:
Principle #20Continuity of useful action

3Reliability

If authentication codes are calculated from repeating message content, then security is enhanced, but processing time increases

Engineering Contradiction:
ImproveauthenticityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The repeating message content is divided into multiple sections, each processed to generate a partial authentication code. This segmentation allows parallel processing and reduces the time required compared to processing the entire message content as a single unit, while maintaining comprehensive authenticity verification.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11288400B2Method, transmitter, and receiver for authenticating and protecting the integrity of message contents
Publication Date: 2022.03.29 SIEMENS AG
  • US11288400B2 patent drawing
  • US11288400B2 patent drawing
  • US11288400B2 patent drawing

AI summary

A method for providing messages which can be authenticated is provided. The method has a step of determining a repeating message content of the messages, a step of calculating sub-authentication codes for the messages using the repeating message content, wherein a first authentication code can be calculated for at least some of the messages from at least one part of the sub-authentication code in order to authenticate the repeating message content, and a step of providing the messages, wherein the messages contain the repeating message content and at least one respective sub-authentication code of the sub-authentication codes.