Scrambled Address-Based Security for Lightweight Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network security challenges arise when adding new devices to secured networks, particularly for devices that are not preconfigured with security credentials, necessitating lightweight authentication methods to prevent malicious access.
Innovation Solution
A method involving a device authentication component that divides a unique device identifier into ordered index values, retrieves values from a random or pseudorandom array, applies a transformation operation, and combines these values to generate a security key for authenticating the device on a network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If devices are preconfigured with security credentials, then network security is improved, but device complexity and manufacturing cost increase
Solution Approach 1:
The device performs self-authentication by generating its own security key using its unique identifier and a random array. The device independently computes the security key through cryptographic operations without requiring external configuration or pre-provisioning, enabling seamless network joining while maintaining security
Solution Approach 2:
The security credential generation process is extracted from the manufacturing/preconfiguration phase and moved to runtime execution. Instead of embedding fixed credentials during device fabrication, the system extracts the necessary security material dynamically using the device's unique identifier and a shared random array, eliminating the need for complex preconfiguration
2Ease of operation
If lightweight authentication methods are used, then ease of device addition is improved, but security strength may be compromised
Solution Approach 1:
The authentication mechanism transitions from traditional credential-based authentication to a cryptographic dimension based on unique identifiers and random array indexing. By leveraging the device's unique identifier as a seed for generating security keys through cryptographic operations, the system achieves both simplicity and security
Solution Approach 2:
A random array is pre-established and stored in both the device and the network system before authentication occurs. This preliminary preparation enables the device to immediately generate its security key using its unique identifier without requiring real-time key distribution or complex setup procedures
Data Source
AI summary
Embodiments described herein provide techniques for generating a security key for use in authenticating a device. Embodiments divide a unique identifier into an ordered plurality of portions, wherein the unique identifier is associated with a first device. A plurality of values is retrieved from an indexable data structure by accessing the indexable data structure using each of the plurality of portions as an index, where the indexable data structure stores a plurality of unique values in a random or pseudorandom order. Embodiments process the retrieved plurality of values to generate a security key and use the security key in processing one or more data communication messages between the first device and a remote computing device.