RFID Authentication Using Pre-Shared Key and Local Location Maps
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication protocols for RFID systems based on pre-shared keys face challenges such as increased implementation costs and security delays due to database queries, and are not suitable for the RFID application, as they require complex management and communication traffic.
Innovation Solution
A method and system for authenticating entities using a symmetric encryption algorithm, where a Pre-Shared Key (PSK) is shared between entities, with an authentication request and response mechanism that includes generating random numbers and calculating message authentication codes using the PSK, allowing for unilateral and mutual identity authentication without changing the PSK, and establishing a session key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If pre-shared key authentication protocols are used in RFID systems, then authentication can be performed, but the key needs to be stored in a database which increases system implementation cost and causes security problems and long delays due to database queries
Solution Approach 1:
The patent extracts the key storage function from the centralized database and places it in distributed location maps stored locally at each server. This eliminates the need for database queries during authentication, removing the single point of failure and reducing system complexity while maintaining security.
Solution Approach 2:
The patent performs preliminary actions by pre-computing and storing location maps at each server before authentication occurs. These location maps contain pre-calculated key locations based on the hierarchical key structure, enabling fast authentication without real-time database queries.
2Reliability
If pre-shared key authentication protocols are used in RFID systems, then authentication can be performed, but database queries cause long delays in the authentication process
Solution Approach 1:
The patent performs preliminary actions by pre-computing and storing location maps at each server before authentication occurs. These location maps contain pre-calculated key locations based on the hierarchical key structure, enabling fast authentication without real-time database queries.
Solution Approach 2:
Each server maintains its own local location map and can independently authenticate keys without needing to query a central database. This self-service capability eliminates authentication delays caused by database access while maintaining authentication validity.
3Reliability
If digital certificate-based security mechanism is used, then authentication can be performed, but the system has excessive communication traffic and management load
Solution Approach 1:
The patent uses lightweight hierarchical keys derived from master keys instead of heavy digital certificates. These keys are computationally inexpensive to generate and verify, dramatically reducing communication overhead and management load while maintaining authentication security.
Solution Approach 2:
The patent changes the authentication parameter from large digital certificates to compact hierarchical key values. This parameter change reduces the amount of data that needs to be transmitted and processed, improving communication efficiency while maintaining security through the mathematical properties of the key derivation function.
Data Source
Figure 1~2
Figure 3~4
AI summary
A method and a system for authenticating an entity based on a symmetric encryption algorithm are provided. The method includes the following steps: 1) an entity A sends an authentication request message to an entity B; 2) after receiving the authentication request message, the entity B sends an authentication response message to the entity A; 3) the entity A determines the validity of the entity B according to the received authentication response message. The implementation cost of the system can be reduced by using the authentication according to the invention.