Processor Smart Card Authentication Pattern Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods fail to ensure that hardware components, such as processors and smart cards, have not been replaced by attackers, allowing unauthorized access to sensitive data.
Innovation Solution
A method where a processor generates a pattern using its secret key, the user's PIN code, and the smart card's secret key, allowing the user to authenticate the device by comparing the generated pattern with a stored version, ensuring only authentic hardware can produce the correct response.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If current authentication methods (software verification only) are used, then software integrity is ensured, but hardware replacement by attackers cannot be detected
Solution Approach 1:
The authentication system is segmented into multiple independent components: the processor with its secret key Kp, the smart card with secret key Kc, and the user with PIN code. Each component contributes a separate element to the pattern generation, creating a distributed authentication system where no single component holds all the secrets. This segmentation prevents attackers from compromising the entire system by replacing just one hardware component.
Solution Approach 2:
The user acts as an intermediary in the authentication process by visually verifying the generated pattern against a previously stored reference pattern. This human-mediated verification step bridges the gap between machine authentication and human trust, allowing users to detect hardware replacement attacks that would otherwise go undetected by automated systems.
2Ease of operation
If hardware secrets are made accessible for verification, then authentication capability is improved, but security against attackers is worsened
Solution Approach 1:
Reference patterns are pre-computed and stored in a secure location accessible only to the user during legitimate authentication. These reference patterns serve as a baseline for comparison, allowing the system to verify hardware authenticity without exposing secret keys. The preliminary preparation of authentication references enables quick verification while maintaining security.
Solution Approach 2:
The patent replaces direct mechanical or electronic access to secret keys with a cryptographic substitution system. Instead of allowing attackers to physically access or measure hardware secrets, the system uses cryptographic functions to generate patterns that indirectly verify hardware authenticity. The secret keys Kp and Kc remain protected within their respective devices, never leaving the hardware boundaries.
3Reliability
If multiple secret keys are used for authentication, then security against hardware replacement is improved, but computational complexity is worsened
Solution Approach 1:
The patent transforms the authentication problem from verifying secret keys directly to verifying a derived pattern parameter. The cryptographic function processes the multiple secret keys (Kp, Kc, and user PIN) and transforms them into a human-readable pattern that is easy to compare visually. This parameter transformation reduces the computational burden on the user while maintaining the security benefits of multiple secrets.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a method for authenticating a device including a processor and a smart card, characterized in that it comprises the following steps: a user unlocking said smart card using a PIN code; transmitting a secret key Kc of said smart card and the PIN code of said smart card to said processor; the cryptographic calculation at said processor using a secret key Kp of the processor, the PIN code, and Kc; said processor generating a human-readable pattern from said cryptographic calculation; transmitting said pattern to the user; and the user comparing said pattern generated by the device with a pattern stored by the user.