Secure Spontaneous Device Associations via Verification Protocol
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In ubiquitous computing environments, establishing and verifying secure associations between devices is challenging due to the ad-hoc nature of spontaneous connections, particularly over wireless links, where users struggle to confirm the successful execution of key-exchange protocols and ensure the security of these associations.
Innovation Solution
A protocol that involves transmitting uniquely identifiable messages with security-related data between devices, verifying compliance with predetermined criteria to ensure secure communication, including the use of public keys and network addresses, and employing a key exchange protocol like Diffie-Hellman to secure associations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If key-exchange protocols are run to establish secure associations between devices, then security is improved, but the ability for users to verify successful execution of the protocol deteriorates
Solution Approach 1:
The patent implements a verification protocol where devices exchange confirmation messages after key-exchange to provide feedback on successful execution. The first device sends a verification message containing a hash of the shared secret to the second device, which responds with its own verification. This feedback loop allows users to confirm that the key-exchange protocol executed successfully without exposing the actual secret key.
Solution Approach 2:
The patent uses cryptographic hash functions as an intermediary mechanism to verify key-exchange success. Instead of directly sharing or displaying the secret key, the system uses hash values of the key as a mediator for verification. This intermediary approach maintains security while enabling verification, as the hash can be compared without revealing the original secret.
2Reliability
If devices exchange security-related data to establish secure associations, then security is improved, but the complexity of the protocol increases
Solution Approach 1:
The patent segments the security establishment process into distinct phases: initial key-exchange protocol execution, verification message generation, and mutual verification. By dividing the complex security establishment into manageable segments with clear boundaries, the protocol becomes more structured and easier to implement while maintaining high security standards.
Solution Approach 2:
The patent performs preliminary actions by pre-computing hash values of the shared secret before actual verification occurs. The first device generates a hash of the shared secret key exchange result and includes it in the verification message beforehand. This preliminary computation simplifies the actual verification step and reduces real-time processing complexity.
Data Source
AI summary
In a first aspect, the present invention provides a protocol for communications across a securable communication channel between a first device and a second device. The protocol includes the transmission of a plurality of uniquely identifiable messages which each include security-related data, from the first device to the second device. The protocol includes determining whether a subset of messages that are received by the second device comply with at least one predetermined message criterion and are identifiable as having been sent from the first device. In the event that said subset of messages are determined to comply with the predetermined verification criterion (or criteria) and are identifiable as having been sent from the first device, the security-related data is determined to have been successfully communicated to the second device.