RFID Authentication Using Blinding Values and Error Calculations

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current RFID systems face security issues and user privacy violations due to vulnerability to man-in-the-middle attacks, and existing lightweight authentication methods are inefficient in terms of resource usage and security.

Innovation Solution

An authentication method that uses a modified secret key and blinding values to minimize storage, operation, and transmission requirements, while providing secure bidirectional authentication through error value calculations and Hamming weight comparisons.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional authentication methods (symmetric key encryption, Hash function, logical operation) are used, then security can be provided, but resource consumption (calculation ability, storage capability) increases significantly

Engineering Contradiction:

Improveauthentication securityVSAvoidresource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent employs lightweight cryptographic primitives that can be implemented with minimal computational resources, effectively using 'cheap' computational operations that consume little energy and can be executed on resource-constrained RFID devices without requiring expensive cryptographic hardware

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The patent modifies traditional authentication parameters by using simplified key schedules and reduced-round cryptographic operations that maintain security while significantly reducing computational complexity and resource consumption compared to conventional authentication methods

Inventive Principle:

Principle #35Parameter changes

2Use of energy by moving object

If lightweight authentication methods based on mathematically hard problems (LPN) are used, then resource efficiency is improved, but vulnerability to man-in-the-middle attacks increases

Engineering Contradiction:

Improveresource efficiencyVSAvoidsecurity against man-in-the-middle attacks

Core Design Contradiction:

Use of energy by moving objectVSReliability

Solution Approach 1:

The patent performs preliminary authentication verification by checking whether the computed authentication result matches the expected value before completing the authentication process, thereby preventing man-in-the-middle attacks by validating the authenticity of exchanged messages in advance

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary verification mechanism that acts as a mediator to validate the authentication exchange between parties, preventing direct manipulation by man-in-the-middle attackers while maintaining resource efficiency

Inventive Principle:

Principle #24Intermediary (Mediator)

3Device complexity

If unidirectional authentication is used, then implementation is simpler, but authentication time increases and security is reduced

Engineering Contradiction:

Improveauthentication implementation complexityVSAvoidauthentication time

Core Design Contradiction:

Device complexityVSLoss of time

Solution Approach 1:

The patent merges client authentication and server authentication into a single integrated bidirectional authentication process, allowing both parties to authenticate each other simultaneously in one exchange rather than requiring separate authentication phases, thereby reducing total authentication time

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS9189616B2Authentication method between client and server, machine-readable storage medium, client and server

Publication Date: 2015.11.17 SAMSUNG ELECTRONICS CO LTD

AI summary

An authentication method between a server and a client is provided. The authentication method includes transmitting, to the client, an inquiry message including a first modified secret key generated based on a first secret key and a first blinding value, receiving, from the client, a response message including a response value generated based on the first blinding value, a second secret key, and an error value, calculating the error value from the response value, and determining whether authentication of the client has succeeded based on the error value.