Secure LRU Access via Challenge-Handshake Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional secured authentication systems for accessing line replaceable units (LRUs) in transportation vehicles are inefficient and insecure, particularly when network connectivity is limited, as they rely on synchronized time or previously assigned passwords, which may not be feasible in transit environments.
Innovation Solution
A method and system using a modified Challenge-Handshake Authentication Protocol (CHAP) that securely stores user-specific secret information on both the user device and the LRU, generating a challenge message and response to validate access without exposing the secret information, utilizing a key server and cryptographic hash functions like SHA256 for secure authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional secured authentication systems using synchronized time or previously assigned passwords are used, then the system is simple to implement, but the security is weak and vulnerable to hackers
Solution Approach 1:
A key server acts as an intermediary between the user device and LRU. The key server stores user-specific secret information and provides it to the user device without exposing it to the LRU. This mediator approach enables secure authentication without requiring complex synchronization mechanisms or exposing sensitive credentials, resolving the contradiction between security and complexity.
Solution Approach 2:
The system creates a copy of the user-specific secret information in the user device's secure memory, derived from the key server, without transferring the actual password or credential. This copying mechanism allows authentication without exposing the original secret, enhancing security while keeping the authentication flow relatively simple.
2Reliability
If conventional authentication systems relying on network connectivity are used, then centralized security management is possible, but the system fails when network connectivity is limited or unavailable
Solution Approach 1:
The user-specific secret information is obtained from the key server and stored in the user device's secure memory before the actual authentication attempt. This preliminary action ensures that the authentication credentials are already available locally, eliminating dependency on network connectivity during the authentication process itself and ensuring availability in transit environments.
Solution Approach 2:
The user device performs self-service authentication by using the locally stored user-specific secret information to generate responses to challenges from the LRU. This self-service capability eliminates the need for continuous network connectivity or centralized authentication servers during the authentication process, enabling operation in disconnected environments.
3Reliability
If user passwords are transmitted and stored, then authentication is straightforward, but the secret information becomes vulnerable to exposure and hacking
Solution Approach 1:
The system extracts and removes the actual password or credential from the authentication process. Instead of transmitting or storing user passwords, the system uses a key server to provide user-specific secret information that can be used for authentication without ever exposing the actual password. This extraction approach maintains ease of operation while dramatically improving security.
Solution Approach 2:
The system converts the potential harm of needing to transmit and store secrets into a benefit by using cryptographic hash functions and challenge-response mechanisms. The user-specific secret information is transformed into authentication proofs that never expose the original secret, turning the requirement for secret management into a security advantage rather than a vulnerability.
Data Source
AI summary
Methods and systems for securely accessing a transportation vehicle are provided. As an example, one method includes obtaining user specific secret information from a key server with a user device, without providing the user access to the user specific secret information; securely storing the user specific secret information in a memory of the user device; generating a challenge message for the user device with an LRU, the challenge message generated by the LRU using the user specific secret information also stored at the LRU and optionally an identifier identifying the LRU; generating a response to the challenge message by the user device using any user specific secret information and the challenge message; providing the response to the LRU; and validating the response by the LRU using any user specific secret information and the challenge message for authorizing access to the LRU by the user device.