Electronic Device Authentication Using PIN Hashes and DTLS
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Authentication between interconnected electronic devices, such as a PC and a TV, is challenging when user account information is lost or not entered correctly, requiring re-login, and existing methods involve direct exchange of personal identification information.
Innovation Solution
A method for device authentication using a one-way encryption function that generates a Datagram Transport Layer Security (DTLS) value based on a hash of a pincode and random values, without direct exchange of personal identification information, involving a first electronic device transmitting authentication information to a second device and verifying the DTLS values for successful authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user account information is used for authentication between devices, then authentication can be performed based on account matching, but authentication fails when account information is lost or not entered correctly
Solution Approach 1:
The patent extracts the authentication function from dependency on user account information. Instead of requiring account credentials, the system uses device-specific authentication information (public keys) that are inherently tied to the devices themselves. This extraction eliminates the vulnerability to account information loss while maintaining authentication reliability.
Solution Approach 2:
The patent implements preliminary action by pre-configuring public keys and authentication information in devices before actual authentication is needed. The public key infrastructure is set up in advance, allowing devices to authenticate each other immediately without requiring user account input or manual configuration during the authentication moment.
2Reliability
If personal identification information is exchanged directly for authentication, then authentication can be performed, but security is compromised due to direct exposure of sensitive information
Solution Approach 1:
The patent introduces an intermediary mechanism using public key cryptography. Instead of directly exchanging sensitive personal identification information, devices exchange public keys which act as intermediaries. The actual authentication is performed through cryptographic protocols that use these public keys without exposing the underlying sensitive information, thus enhancing security while managing complexity through standardized cryptographic operations.
Solution Approach 2:
The patent changes the parameter of authentication from using direct personal identification information to using cryptographic hashes and DTLS values. By transforming the authentication parameter from raw sensitive data to processed cryptographic representations, the system maintains authentication functionality while eliminating direct exposure of sensitive information.
3Reliability
If user account login is required for device connection, then authentication can be performed, but user experience deteriorates due to repeated login requirements
Solution Approach 1:
The patent implements self-service authentication where devices automatically perform authentication using their pre-configured public keys and the authentication server. The system serves itself by automatically establishing trust relationships without requiring user intervention for account input or login, eliminating repeated authentication requirements and improving user experience while maintaining verification reliability.
Data Source
AI summary
An operation method of a first electronic device may comprise: identifying an input inputting a pincode; transmitting, to a second electronic device, the pincode and authentication information of a first electronic device, including a public key of the first electronic device; receiving encryption information from the second electronic device; identifying a first random number value on the basis of the encryption information and a private key of the first electronic device; generating a hash value based on the first random number value and the pincode; generating a datagram transport layer security (DTLS) value based on the hash value; and performing authentication with the second electronic device based on the DTLS value.