Secure Device Registration via Push Notification Cryptographic Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-factor authentication systems face challenges in securely registering mobile devices and embedded systems, particularly due to the risk of brute-force attacks on short registration codes and the complexity of managing concurrent authentication sessions in large-scale distributed computing environments.
Innovation Solution
The system employs a push notification mechanism to verify the trustworthiness of mobile devices by using a designated application that accesses a cryptographic key stored in a secure environment, preventing unauthorized access and mitigating brute-force attacks through cryptographic signatures and secure communication protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a registration code is sent to verify device possession, then device registration security is improved, but the system becomes vulnerable to brute-force attacks on short codes
Solution Approach 1:
The patent introduces a push notification mechanism as an intermediary between the server and the device. Instead of directly relying on user input of short registration codes, the system uses push notifications to deliver verification codes and receive cryptographic responses. This intermediary layer prevents direct brute-force attacks on the registration code while maintaining security verification.
Solution Approach 2:
The patent replaces the mechanical interaction of manual code entry and verification with an automated electronic system. The designated application on the device automatically receives push notifications, generates cryptographic responses using stored keys, and sends them back to the server without user intervention. This substitution eliminates the vulnerability point where users manually enter codes that could be guessed.
2Reliability
If cryptographic keys are stored in a secure environment accessible only to designated applications, then security is improved, but device complexity increases
Solution Approach 1:
The patent implements a nested structure where the cryptographic key is stored within a secure environment (such as a trusted execution environment or secure element) that is embedded within the device. The designated application accesses this nested secure layer through controlled interfaces, allowing high security while maintaining a relatively simple overall device architecture.
3Object-affected harmful factors
If push notifications are used to verify device trustworthiness, then brute-force attacks are mitigated, but network communication requirements increase
Solution Approach 1:
The patent designs the push notification mechanism to serve multiple functions simultaneously: it delivers verification codes, triggers cryptographic operations, and transports authentication responses. This multi-functionality reduces the need for separate communication protocols and channels, thereby mitigating brute-force attacks without proportionally increasing network communication complexity.
Data Source
AI summary
Provided is a process including: receiving a request from a first computing device to register another computing device; sending to the first computing device a registration code; receiving the registration code from a second computing device; sending an instruction to the designated application to send a value indicative of access to a cryptographic key; receiving from the designated application the value indicative of access to the cryptographic key; determining, based on the received value, that the received registration code was sent by the designated application and not another untrusted application.