Real-Time Data Authentication With Dynamic Keys for IoT Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Physical Unclonable Function (PUF) systems in IoT networks are vulnerable to security breaches due to attackers estimating responses through continuous monitoring, and increasing the size of Challenge Response Pair (CRP) tables only extends exposure time without providing a fundamental solution.
Innovation Solution
Creating dynamic keys based on features extracted from real-time data using auto-encoders, where each key is determined at every transmission and reception cycle, and combining these keys with challenge responses for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the size of CRP table is increased to prevent security estimation by attackers, then security exposure time is extended, but the solution remains fundamental incomplete and device complexity increases
Solution Approach 1:
The patent applies dynamics by making the authentication key changeable over time through periodic updates. Instead of using a static CRP table, the system generates new challenge-response pairs at regular intervals, making the authentication mechanism dynamic and adaptive to security threats while reducing the reliance on large static tables
Solution Approach 2:
The patent implements preliminary action by pre-generating multiple challenge-response pairs and storing them in the CRP table in advance. This allows the system to have multiple authentication credentials ready before any security breach occurs, enabling rapid key rotation without requiring real-time generation during authentication events
2Reliability
If continuous monitoring is performed to detect attacker estimation, then security threats can be identified, but authentication performance and processing speed deteriorate
Solution Approach 1:
The patent applies skipping by implementing periodic authentication rather than continuous monitoring. The system performs security verification at predetermined intervals, allowing normal authentication operations to proceed quickly without constant security checks, while still maintaining security through regular periodic validations
Solution Approach 2:
The patent implements periodic action through time-based key updates where authentication credentials are refreshed at regular intervals. This periodic regeneration of challenge-response pairs maintains security without requiring continuous monitoring, as the system proactively updates credentials before potential breaches can occur
3Reliability
If dynamic keys are created at every transmission cycle based on real-time data, then security is enhanced against packet interception, but computational complexity and processing time increase
Solution Approach 1:
The patent applies preliminary action by pre-generating multiple challenge-response pairs and storing them in the CRP table before they are needed. This allows the system to quickly retrieve pre-computed authentication credentials during transmission cycles without performing complex key generation operations in real-time, thus maintaining security while reducing processing time
Solution Approach 2:
The patent implements dynamics through periodic key updates where authentication credentials are refreshed at predetermined time intervals rather than at every single transmission. This dynamic approach balances security requirements with processing efficiency by updating keys frequently enough to maintain security but not so frequently as to create excessive computational overhead
Data Source
AI summary
The present disclosure relates to a secure transmitting and receiving method that crates a dynamic key on the basis of the features of real-time data, thereby performing authentication operation. A secure transmitting method for real time data according to an embodiment of the present disclosure includes: collecting an n-th datum; compressing the n-th datum; creating and storing an n-th dynamic key in a memory on the basis of a feature extracted in the compressing; creating an n-th security key using an n-m-th dynamic key stored in the memory and transmitting the n-th security key to a server; and transmitting the compressed n-th datum to the server when receiving an authentication success signal from the server.