Secure Device Configuration via Cryptographic Signature Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Configuration of safety-critical devices often lacks secure mechanisms to prevent hijacking of configuration sessions, posing risks to safety and security.
Innovation Solution
A method and system for configuring target devices using a user device that involves transmitting and verifying cryptographic signatures to ensure the authenticity and integrity of configuration messages, utilizing public and secret keys to secure the configuration process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a user interface is provided to allow user configuration, then ease of operation is improved, but security is worsened due to potential hijacking of configuration sessions
Solution Approach 1:
The patent applies preliminary action by establishing cryptographic authentication mechanisms before the configuration session begins. The user device and target device exchange public keys and generate digital signatures in advance, creating a secure foundation that prevents hijacking before it can occur during the configuration process.
Solution Approach 2:
The patent introduces cryptographic signatures and public key infrastructure as intermediaries between the user device and target device. These cryptographic elements mediate the configuration session by verifying identities and ensuring message integrity, thereby preventing unauthorized access without interfering with the ease of configuration operations.
2Reliability
If cryptographic verification is implemented for all configuration messages, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent applies self-service by enabling the user device and target device to autonomously perform cryptographic verification of each other's messages. Each device uses the other's public key to verify digital signatures without requiring external authentication authorities or complex manual verification procedures, thereby maintaining security while limiting the increase in operational complexity.
Solution Approach 2:
The patent replaces manual or mechanical authentication methods with cryptographic mechanisms. Instead of complex physical security measures or manual verification procedures, the system uses digital signatures and public key cryptography to automatically verify configuration messages, reducing operational complexity while enhancing security.
Data Source
AI summary
It is provided a method for configuring a target device. The method comprises the steps of: transmitting a configuration request message to the target device, the configuration request message comprising a configuration request and a request signature, wherein the request signature is based on the configuration request; receiving a configuration response message from the target device, the configuration response message comprising a configuration response and a response signature, wherein the response signature is based on the configuration response and the request signature; verifying the response signature to determine whether the configuration response message is valid, based on the configuration response, the request signature and a public key for the target device; and transmitting a configuration commit message to the target device only when the configuration response message is valid, the configuration commit message comprising a configuration commit indicator and a commit signature.