Sensor Node Authentication Ticket System for Mobile Sink Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing sensor network authentication methods are inefficient for dynamic environments, particularly when mobile sensor nodes need to reconnect to different sink nodes, leading to increased overhead and resource usage due to the lack of consideration for reauthentication and node mobility.

Innovation Solution

The proposed method uses an authentication ticket system where a sensor node receives an authentication ticket from a sink node, which is validated using a group key, allowing for efficient reauthentication when the node moves to a new sink node, reducing the need for repeated authentication processes and resource usage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional authentication methods are used for mobile sensor nodes, then security authentication can be performed, but reauthentication overhead and resource usage increase significantly when nodes move between sink nodes

Engineering Contradiction:
Improveauthentication securityVSAvoidreauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-generating authentication tickets at the original sink node before the sensor node moves. These tickets contain pre-computed authentication information that can be quickly validated by new sink nodes, eliminating the need for time-consuming reauthentication processes when nodes move between sink nodes.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces authentication tickets as an intermediary element between sink nodes. These tickets serve as portable authentication credentials that sensor nodes carry when moving, allowing new sink nodes to verify authenticity without performing complete authentication protocols, thus reducing reauthentication overhead.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If complete authentication protocols are performed at each sink node, then authentication security is maintained, but energy consumption and computational resources increase

Engineering Contradiction:
Improveauthentication securityVSAvoidsensor node energy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent applies partial action by implementing selective authentication verification. Instead of performing complete authentication protocols at each sink node, the system uses authentication tickets that contain sufficient verification information for quick validation. This partial verification approach maintains security while significantly reducing computational overhead and energy consumption at new sink nodes.

Inventive Principle:
Principle #16Partial or excessive action

3Ease of operation

If authentication information is dispersed among all sink nodes, then authentication can be performed, but communication overhead and network complexity increase

Engineering Contradiction:
Improveauthentication processVSAvoidnetwork structure complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent extracts authentication information from the distributed sink node structure and consolidates it into portable authentication tickets. Instead of requiring all sink nodes to have access to dispersed authentication information, the sensor node carries the necessary authentication credentials in tickets, simplifying the network structure while maintaining authentication capability.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS8516252B2Method and apparatus for authenticating a sensor node in a sensor network
Publication Date: 2013.08.20 SAMSUNG ELECTRONICS CO LTD
  • US8516252B2 patent drawing
  • US8516252B2 patent drawing
  • US8516252B2 patent drawing

AI summary

A method and apparatus for authenticating a sensor node in a sensor network. The method for authenticating a sensor node by a first sink node in a sensor network includes receiving an authentication request using an authentication ticket from the sensor node, identifying a second sink node which has issued the authentication ticket, decoding the authentication ticket using a group key, which is previously stored in correspondence to the second sink node to confirm the validity of the authentication ticket, when the second sink node is included in a neighboring node list, normally processing authentication for the sensor node, generating an authentication ticket using a group key of the first sink node, and transmitting the generated authentication ticket to the sensor node.