RFID Tag Secure Communication Using Bilinear Map
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In secure communication systems, there is a challenge in ensuring the confidentiality and authenticity of data exchanged between users who have accessed the same identification device, particularly in supply chain management, where companies need to trust each other to share information while protecting against espionage and counterfeiting risks.
Innovation Solution
A method and system that utilize a shared key derived from public and private cryptographic values stored on a Radio Frequency Identification (RFID) tag, enabling mutual authentication and secure communication between users who have accessed the same identification device, using a bilinear map to protect against Computational Diffie-Hellman Problem attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic values are stored on an identification device to enable secure communication, then security and authenticity are improved, but device complexity and storage requirements increase
Solution Approach 1:
The cryptographic system is segmented into multiple components: public cryptographic values stored on the identification device, private cryptographic values stored securely by users, and a trusted third party for key management. This segmentation allows security functionality to be distributed rather than concentrated in a single complex device.
Solution Approach 2:
A trusted third party acts as an intermediary to manage cryptographic key pairs and facilitate secure communication between users. This intermediary handles the complex key generation and distribution, reducing the burden on individual identification devices while maintaining high security standards.
2Adaptability or versatility
If multiple users access the same identification device, then information sharing and collaboration are improved, but risk of unauthorized access and espionage increases
Solution Approach 1:
Each user is assigned unique cryptographic credentials (private keys) that are locally stored and used for authentication. This ensures that while multiple users can access the identification device, each user's access is individually authenticated and authorized, providing localized security control for each access instance.
Solution Approach 2:
The system implements mutual authentication where users verify each other's credentials through cryptographic challenge-response protocols. This feedback mechanism ensures that only authorized users can access shared information, and any unauthorized access attempts are detected and rejected.
3Reliability
If cryptographic operations are performed on the identification device, then communication security is improved, but processing time and energy consumption increase
Solution Approach 1:
Cryptographic key pairs are generated and distributed in advance by a trusted third party before communication occurs. Public keys are pre-stored on identification devices, and private keys are securely distributed to users beforehand. This preliminary setup eliminates the need for time-consuming cryptographic operations during actual communication sessions.
Solution Approach 2:
Users independently perform cryptographic operations using their privately stored keys without requiring real-time processing power from the identification device. The identification device simply stores and transmits pre-configured public values, while users handle the computationally intensive encryption and decryption operations locally.
Data Source
AI summary
A computer-implemented method of securing communications sent by a first user to a second user may include receiving, by a first user from a trusted third party, at least one public cryptographic value corresponding to the first user and at least one private cryptographic value corresponding to the first user, providing, by the first user to a second user, a plurality of values corresponding to an identification device identified by an identifier, deriving, by the first user, a shared key, using the at least one private cryptographic value of the first user, and at least one of the plurality of values corresponding to the identification device identified by the identifier and protecting communications sent by the first user to the second user with the shared key.