Polynomial Share Authentication for IoT Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security and authentication systems, particularly those using public key infrastructure (PKI), face challenges in scaling with the increasing number of devices, are vulnerable to single points of failure, and struggle with secure key management, especially in the context of Internet of Things (IoT) devices.
Innovation Solution
A system and method for secure password management and account revocation involving the use of polynomial values shared between entities over multiple communication channels, ensuring that no single entity can obtain enough information to compromise security, and using temporary passwords generated based on polynomial pairs to authenticate devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized certificate authority (RA) is used to manage digital certificates, then authentication and security can be established, but the system does not scale easily as the number of devices grows and creates a single point of failure
Solution Approach 1:
The patent divides the centralized certificate authority into multiple distributed authentication entities. Each entity holds a portion of the authentication credentials (polynomial shares) rather than one central authority holding all credentials. This segmentation eliminates the single point of failure while maintaining authentication security, as no single entity can compromise the entire system.
Solution Approach 2:
The patent introduces a new dimensional approach by using polynomial interpolation in mathematical space. Instead of hierarchical certificate management, the system uses coordinate geometry where authentication credentials are represented as points on a polynomial curve. This allows any subset of entities to reconstruct the authentication key through mathematical operations, enabling scalable distributed authentication.
2Reliability
If a centralized RA manages all digital certificates, then security can be enforced, but the RA becomes a single point of failure and creates security vulnerabilities
Solution Approach 1:
The patent segments the authentication credentials into multiple polynomial shares distributed across different entities. No single entity possesses the complete authentication key, eliminating the single point of failure. Even if one entity is compromised, the attacker cannot reconstruct the full authentication credential without additional shares from other entities.
Solution Approach 2:
The patent introduces polynomial interpolation as a mathematical intermediary mechanism. Instead of direct credential storage, the system uses polynomial mathematics to mediate between distributed entities and the authentication key. This intermediary layer ensures that even with multiple entities, the security structure remains robust and no single point of failure exists.
3Reliability
If traditional encryption methods are used to protect credentials, then data can be secured, but encryption keys can be stolen and decrypted data can be compromised
Solution Approach 1:
The patent segments the encryption key into multiple polynomial shares distributed across different entities. The actual encryption key never exists in a single location or is transmitted over networks. Instead, only polynomial evaluation points are shared, which are mathematically useless without sufficient points to reconstruct the polynomial. This eliminates key theft vulnerability while maintaining data security.
Solution Approach 2:
The patent creates mathematical copies (polynomial evaluation points) of the authentication credential rather than copying the credential itself. These copies can be safely distributed and transmitted, but they cannot be used to reconstruct the original credential without collecting enough points and performing polynomial interpolation. This allows secure credential distribution without exposing the actual authentication key.
4Reliability
If PKI infrastructure is used for device authentication, then security can be established, but the system cannot meet challenges of authenticating extremely large numbers of IoT devices
Solution Approach 1:
The patent segments the authentication process into independent polynomial share distributions. Each IoT device receives its authentication credentials through distributed polynomial share distribution rather than centralized certificate issuance. This allows parallel authentication of multiple devices without overloading a central authority, dramatically increasing authentication throughput for large-scale IoT deployments.
Solution Approach 2:
The patent enables devices to autonomously generate and store their polynomial shares locally without requiring centralized registration or certificate management. Each device independently participates in the authentication process by contributing its share to the polynomial reconstruction, eliminating the need for a centralized registration authority and enabling scalable IoT authentication.
Data Source
AI summary
A system and method for of temporary password management may include: obtaining, by a password management entity, a request to login a local device into an authentication authority; generating, by the password management entity, a temporary password; sending, by the password management entity, the temporary password to the authentication authority; sending, by the password management entity, the temporary password to a user device; obtaining, at the authentication authority the temporary password from the local device; comparing, by the authentication authority, the temporary password obtained from the local device with the temporary password obtained from the password management entity; and authorizing the login if a match is found.