Sensor Data Authentication via Certificate-Based Logging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need to ensure the authenticity and accuracy of measurements from environmental sensors, such as temperature and humidity sensors, which are integrated with data loggers and may be subject to malicious attacks that can corrupt stored data.
Innovation Solution
The method involves transmitting a certificate signing request (CSR) from a data logger to an authentication server, receiving a signed device certificate and a signed owner certificate, storing sensor measurements based on commands signed with the owner certificate, and generating a data structure with the measurements signed using the device certificate for transmission to the authentication server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is used to authenticate measurements and commands, then security is improved, but processing resources and power consumption increase
Solution Approach 1:
The patent extracts the computationally intensive encryption operations from the data logger and relocates them to a more powerful authentication server. The data logger only performs lightweight cryptographic operations (hashing and digital signatures), while the server handles the heavy lifting of certificate validation and authentication, thus reducing power consumption at the sensor device while maintaining security.
Solution Approach 2:
The patent introduces an authentication server as an intermediary between the data logger and the users/controllers. This intermediary handles the computationally expensive authentication and encryption/decryption operations, allowing the data logger to use simpler, less power-consuming cryptographic mechanisms while still achieving strong security through the intermediary's validation.
2Reliability
If encryption is used to authenticate measurements and commands, then security is improved, but processing resources increase
Solution Approach 1:
The patent extracts the computationally intensive encryption operations from the data logger and relocates them to a more powerful authentication server. The data logger only performs lightweight cryptographic operations (hashing and digital signatures), while the server handles the heavy lifting of certificate validation and authentication, thus reducing power consumption at the sensor device while maintaining security.
Solution Approach 2:
The patent introduces an authentication server as an intermediary between the data logger and the users/controllers. This intermediary handles the computationally expensive authentication and encryption/decryption operations, allowing the data logger to use simpler, less power-consuming cryptographic mechanisms while still achieving strong security through the intermediary's validation.
3Reliability
If certificate-based authentication is implemented, then data authenticity is improved, but device complexity increases
Solution Approach 1:
The patent implements preliminary action by pre-provisioning the data logger with a unique identifier and private key during manufacturing, and pre-establishing trust relationships through the authentication server. The device certificate is issued in advance based on the pre-provisioned credentials, so that when the device operates, the authentication mechanisms are already in place and do not require complex runtime setup procedures.
Solution Approach 2:
The data logger is designed to autonomously perform cryptographic operations using its pre-provisioned private key and stored device certificate. The device independently generates digital signatures for its measurements and commands without requiring external assistance, thereby achieving self-service authentication that maintains data authenticity while minimizing operational complexity.
Data Source
AI summary
In some implementations, a device may transmit, to an authentication server, a certificate signing request (CSR) based on a private key stored on a data logger, wherein the data logger is integrated with a sensor within the device. The device may receive, via the data logger and from the authentication server, a signed device certificate based on the CSR. Additionally, the device may receive, via the data logger and from the authentication server, a signed owner certificate associated with a controller. The device may receive, via the data logger and from the controller, a command signed using the owner certificate. Accordingly, the device may store, in the data logger, measurements from the sensor based on the command. The device may generate a data structure including the stored measurements, wherein the data structure is signed using the signed device certificate. The device may transmit, to the authentication server, the data structure.