Remote Device Cryptographic Authorization via Preliminary Action
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic initialization systems for remote devices require devices to remain within range of a ground-based CIK-initialized device for authorization, leading to inefficiencies and increased costs due to potential loss of authorization from events like power surges or software faults.
Innovation Solution
A method and system for remotely initializing devices using an asymmetric cryptographic authorization scheme, where a local host device initiates a cryptographic authorization sequence, encodes and sends encryption values using private keys, and verifies these values using public keys, allowing remote devices to transition to an active state for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a remote device is initialized by a ground-based CIK-initialized device and requires remaining within range for authorization, then the device can be securely authorized, but the device must return to the initialization point after losing authorization due to power surges or software faults, resulting in loss of time and increased fuel costs
Solution Approach 1:
The patent applies preliminary action by providing the remote device with a stored authentication credential (such as a digital certificate or cryptographic key) during the initial authorization process. This stored credential enables the device to re-authenticate autonomously without returning to the ground-based device, thereby preventing the need for time-consuming re-initiation trips and eliminating fuel costs associated with returning to the initialization point.
2Reliability
If a remote device is initialized by a ground-based CIK-initialized device and requires remaining within range for authorization, then the device can be securely authorized, but the device must return to the initialization point after losing authorization due to power surges or software faults, increasing fuel costs
Solution Approach 1:
The patent applies preliminary action by providing the remote device with a stored authentication credential (such as a digital certificate or cryptographic key) during the initial authorization process. This stored credential enables the device to re-authenticate autonomously without returning to the ground-based device, thereby preventing the need for time-consuming re-initiation trips and eliminating fuel costs associated with returning to the initialization point.
3Ease of operation
If a remote device is initialized by a ground-based CIK-initialized device, then the device can be authorized, but the device loses authorization when out of range due to power surges or software faults, requiring return to the initialization point
Solution Approach 1:
The patent applies preliminary action by providing the remote device with a stored authentication credential (such as a digital certificate or cryptographic key) during the initial authorization process. This stored credential enables the device to re-authenticate autonomously without returning to the ground-based device, thereby preventing the need for time-consuming re-initiation trips and eliminating fuel costs associated with returning to the initialization point.
4Ease of operation
If a remote device is initialized by a ground-based CIK-initialized device, then the device can be authorized, but returning to the initialization point for re-initiation increases the potential for failing mission objectives
Solution Approach 1:
The patent applies preliminary action by providing the remote device with a stored authentication credential (such as a digital certificate or cryptographic key) during the initial authorization process. This stored credential enables the device to re-authenticate autonomously without returning to the ground-based device, thereby preventing the need for time-consuming re-initiation trips and eliminating fuel costs associated with returning to the initialization point.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method (500) of remotely initializing at least one device is disclosed. The method includes initializing (502) at a local host a cryptographic authorization sequence after receiving a secure input value. The method further includes receiving (504) at a local host cryptographic controller a first authorization request from a first remote device. After a challenge-response authentication protocol, the first remote device is authenticated and receives a public key infrastructure certificate. The method includes receiving (506) at a first remote cryptographic controller a second request from a second remote device. After a challenge-response authentication protocol, the first remote device is authenticated, but does not receive a public key infrastructure certificate. A system for remotely initiating at least one device is also disclosed.