Proxy Authentication for Zero-Power IoT Network Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Zero-power Internet of Things (A-IoT) devices face challenges in performing authentication with a network side while minimizing calculation complexity.

Innovation Solution

A first device acts as a proxy for zero-power devices, transmitting messages to a core network side device that carry responses for authentication, thereby reducing the computational burden on the A-IoT devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If A-IoT devices perform authentication directly with the core network, then authentication security is maintained, but calculation complexity increases significantly

Engineering Contradiction:
Improveauthentication securityVSAvoidcalculation complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a first device (such as a gateway or relay device) as an intermediary between the A-IoT device and the core network. The first device performs authentication calculations on behalf of the A-IoT device, while the A-IoT device only needs to provide simple identifiers. This mediator approach maintains authentication security through proper key management while dramatically reducing the calculation burden on resource-constrained A-IoT devices.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication process is segmented into different functional parts: the A-IoT device provides minimal input (identifiers), the first device performs complex calculations (authentication responses), and the core network verifies results. This segmentation allows each component to perform only the calculations appropriate to its capabilities, resolving the contradiction between security requirements and device complexity constraints.

Inventive Principle:
Principle #1Segmentation

2Reliability

If A-IoT devices perform complex authentication calculations, then authentication completeness is achieved, but energy consumption increases

Engineering Contradiction:
Improveauthentication completenessVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The first device acts as an energy-offloading intermediary that performs computationally intensive authentication operations. Since the first device has greater processing power and energy reserves, it can complete authentication calculations without significantly impacting the overall energy efficiency of the A-IoT system, while still achieving complete authentication.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The A-IoT device creates a simplified representation of its identity (identifiers) rather than performing full authentication calculations itself. The first device then uses these identifiers to generate the actual authentication responses, effectively copying the authentication function to a more capable device and reducing energy consumption at the A-IoT device端.

Inventive Principle:
Principle #26Copying

3Reliability

If traditional authentication protocols are used, then security is maintained, but processing time increases

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The first device pre-establishes security contexts and authentication credentials with the core network before A-IoT devices need to authenticate. When an A-IoT device needs authentication, the first device can quickly generate responses using pre-computed keys and stored security parameters, significantly reducing the time required compared to traditional on-demand authentication protocols while maintaining security.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP4712530A1Authentication method and device
Publication Date: 2026.03.18 GUANGDONG OPPO MOBILE TELECOMMUNICATIONS CORP LTD
  • EP4712530A1 patent drawingFigure 1~4
  • EP4712530A1 patent drawingFigure 5a~5b
  • EP4712530A1 patent drawingFigure 6

AI summary

The present application relates to an authentication method, a device a computer readable storage medium, a computer program product, and a computer program. The method comprises: a first device sends a first message to a core network side device, wherein the first message carries a first response, and the first response is applied to the core network side device to execute authentication related to one or more second devices.