Public Key Generation Using Unique Device Identifiers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security tokens are vulnerable to cloning attacks due to the lack of a symmetric key infrastructure and complex key management, making it difficult to provide a robust cryptographic proof of authenticity.
Innovation Solution
A method for generating a public key based on a private key and a unique identifier associated with an electronic device, using a diversified base point to enhance security and reduce computational effort, allowing for shorter keys while maintaining security levels comparable to standard asymmetric proof protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard asymmetric proof protocols are used for authentication, then security is provided, but key length and computational complexity increase
Solution Approach 1:
The patent segments the authentication system into two parts: a standardized asymmetric proof algorithm component and a unique identifier component. The public key is segmented into the base point (from the algorithm) and the unique identifier (device-specific), allowing the system to reuse the standardized algorithm while adding device uniqueness without increasing overall complexity
Solution Approach 2:
The patent creates a universal base point that can be used across all devices in the system. This single base point serves multiple devices, each combining it with their own unique identifier to form their public key. This eliminates the need for each device to implement a complete separate key generation system, reducing complexity while maintaining security
2Reliability
If asymmetric primitives are used for cryptographic proof, then cloning resistance is improved, but key management becomes more complex
Solution Approach 1:
Each electronic device generates its own public key by combining the universal base point with its own unique identifier stored in its memory. This self-service approach eliminates the need for complex centralized key management infrastructure, as each device independently manages its own authentication credentials using the standardized algorithm
Solution Approach 2:
The unique identifier is pre-stored in the device's memory during manufacturing, and the base point is predetermined by the system. This preliminary preparation of authentication components eliminates the need for complex runtime key generation and management, simplifying the overall key management process while maintaining strong cloning resistance
3Reliability
If unique base points are used for each device, then security against general attacks is improved, but computational effort increases
Solution Approach 1:
The patent changes the parameter used for device differentiation from the base point itself to the unique identifier that combines with the base point. By keeping the base point constant and varying only the unique identifier parameter, the system achieves device uniqueness without the computational overhead of generating and processing unique base points for each device
Data Source
AI summary
A method for generating a public key for an electronic device is provided, wherein the method comprises generating a public key 103 based on a private key and a unique identifier associated with the electronic device 200.