Post-Quantum Secure Software Updates for Resource-Constrained Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing public-key digital signature algorithms like RSA and ECDSA are not secure against quantum computer attacks, necessitating the development of post-quantum secure hash-based signature schemes that can withstand such threats, particularly for resource-constrained devices used in software updates.
Innovation Solution
The implementation of the Extended Merkle Signature Scheme (XMSS) and Leighton/Micali Signature (LMS) hash-based signature schemes, which utilize one-time signature schemes and secure hash algorithms like SHA2-256, along with Merkle trees for robust state synchronization and secure software updates, ensuring single-use of private keys to prevent forgery and accommodate resource-constrained environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If post-quantum hash-based signature schemes (XMSS, LMS) are implemented on resource-constrained devices, then security against quantum attacks is improved, but computational burden and resource consumption increase
Solution Approach 1:
The patent divides the signature verification process into two parts: a computationally intensive pre-processing stage that generates Merkle authentication paths and can be performed offline or on powerful systems, and a lightweight verification stage that runs on resource-constrained devices. This segmentation allows security-critical operations to be performed elsewhere while minimizing on-device computational burden.
Solution Approach 2:
The patent performs computationally expensive operations in advance by pre-generating Merkle trees and authentication paths during a setup phase. These pre-computed structures are then stored and reused during verification, eliminating the need for resource-constrained devices to perform heavy computations in real-time while maintaining post-quantum security.
2Productivity
If traditional digital signature algorithms (RSA, ECDSA) are used, then computational efficiency is maintained, but security against quantum computer attacks is lost
Solution Approach 1:
The patent introduces Merkle trees as an intermediary structure that bridges post-quantum security requirements with resource-constrained environments. The Merkle authentication paths act as mediators that enable secure verification without requiring full post-quantum cryptographic operations on resource-constrained devices, thus maintaining efficiency while achieving security.
3Reliability
If full post-quantum signature verification is performed on resource-constrained devices, then security is ensured, but device complexity and resource requirements increase
Solution Approach 1:
The patent extracts the computationally intensive components of post-quantum signature verification (Merkle tree construction and authentication path generation) and removes them from resource-constrained devices. These extracted operations are performed externally or pre-computed, leaving only lightweight verification steps for the constrained devices, thus reducing device complexity while maintaining security assurance.
Data Source
AI summary
A method comprises receiving an image of an update for a software module, a rate parameter, an index parameter, and a public key, generating a 32-byte aligned string, computing a state parameter using the 32-byte aligned string, generating a modified message representative, computing a Merkle Tree root node, and in response to a determination that the Merkle Tree root node matches the public key, forwarding, to a remote device, the image of the update for a software module, the state parameter; and the modified message representative.