Secure Communications via Non-Invertible Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems in interconnected devices, such as those in the Internet of Things (IoT), are vulnerable to spoofing attacks that allow fraudulent messages to be sent through secured channels, necessitating enhanced security measures for message exchanges.
Innovation Solution
A process involving the transmission of messages with an identifier and encrypted authentication values, where non-invertible operations like hashing are applied to generate and verify channel identifiers, ensuring only authorized devices can process encrypted data values, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If crypted communication is implemented to secure communication channels, then communication security is improved, but the system remains vulnerable to spoofing attacks where fraudulent messages can still be sent
Solution Approach 1:
The patent applies preliminary action by pre-establishing and distributing public keys to authorized devices before communication begins. Each device stores a public key associated with it, enabling recipients to verify the authenticity of messages in advance. This preliminary key distribution mechanism prevents spoofing attacks by ensuring that only messages signed with the correct private key (and verified against the stored public key) can be accepted, thereby resolving the vulnerability to fraudulent messages while maintaining secure communication.
2Reliability
If authentication values are added to messages to prevent spoofing, then message authenticity is improved, but message structure and processing complexity increase
Solution Approach 1:
The patent applies the extraction principle by isolating the authentication verification function into a separate, dedicated process that operates independently from the main data processing flow. The authentication value is extracted as a distinct component of the message structure, and its verification is handled through a separate algorithmic step that uses the public key. This separation allows the authentication mechanism to be implemented efficiently without complicating the overall message processing architecture, as the authentication check can be performed modularly without interfering with data handling operations.
Data Source
AI summary
A process comprises transmitting, by a first device and through a first communication channel, a message comprising an identifier of the first channel, a first encrypted authentication value and at least one encrypted data value, the first authentication value being associated with the first device, receiving, by a second device, the message, decrypting, by a first circuit of the second device, the first encrypted authentication value, applying, by the first circuit of the second device, at least one non-invertible operation on the first decrypted authentication value, resulting in a verification value, comparing, by the first circuit of the second device, the verification value with the identifier of the first channel, and processing the at least one encrypted data value based on the comparison.