IoT Sensor Node Authentication via Mobile Terminal Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional IoT communication systems prioritize uplink communication, making it difficult to download large volumes of data reliably from gateways to sensor nodes, and managing authentication for large-scale sensor networks is cumbersome due to the need for physical keys or complex authentication methods.
Innovation Solution
A communication system where a mobile terminal connects to a server via mobile line communication and to a sensor node through local communication, using public and private key pairs for secure key exchange, with the server verifying data integrity through hash values, eliminating the need for physical keys and simplifying authentication management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If uplink communication is prioritized over downlink communication in sensor networks, then uplink communication reliability is improved, but downlink communication efficiency deteriorates
Solution Approach 1:
The patent implements dynamic communication mode switching where the system can adapt between uplink-priority mode and downlink-priority mode based on operational requirements. The base station dynamically adjusts resource allocation and communication parameters to optimize for either uplink reliability or downlink efficiency as needed, rather than being fixed in one mode.
Solution Approach 2:
The system changes communication parameters such as bandwidth allocation, power control settings, and protocol configurations dynamically based on the required communication direction priority. When downlink efficiency is needed, parameters are adjusted to favor downlink transmission resources while maintaining acceptable uplink performance.
2Reliability
If physical keys or complex authentication methods are used to secure local communication, then communication security is improved, but system operation complexity increases
Solution Approach 1:
The patent replaces physical key locks and manual authentication procedures with electronic public key infrastructure (PKI). Instead of physically locking communication ports or manually verifying worker credentials, the system uses digital certificates and cryptographic key pairs for automated authentication, eliminating the need for physical key management.
Solution Approach 2:
The system implements self-service authentication where devices automatically perform mutual authentication using pre-configured digital certificates. The base station and sensor nodes autonomously verify each other's identities through cryptographic protocols without requiring manual intervention from operators, significantly reducing authentication management burden.
3Quantity of substance
If the number of sensor nodes exceeds 1,000 in a large-scale system, then system coverage is improved, but authentication management burden increases
Solution Approach 1:
The patent implements a universal authentication framework based on public key infrastructure that can authenticate any number of devices using the same cryptographic protocol. Instead of requiring separate authentication mechanisms for different scales, the PKI system provides a scalable, one-size-fits-all solution that works equally well for small and large-scale deployments.
Solution Approach 2:
The base station acts as an intermediary that manages authentication for multiple sensor nodes. Rather than requiring direct authentication management between each pair of devices, the base station mediates the authentication process, verifying device identities and managing security credentials centrally, which simplifies management in large-scale systems.
Data Source
AI summary
A public key of a sensor node key pair is transmitted from a sensor node 22 to a server 20 via sensor network communication, and furthermore is transmitted from the server 20 to a mobile terminal 25 via mobile line communication. In addition, a public key of a mobile terminal key pair is transmitted from the mobile terminal 25 to the sensor node 22 through local communication. Thus, the configuration allows the sensor node 22 and the mobile terminal 25 to generate a common key by combining their own private key and the public key of the counterpart in order to encrypt the local communication by using this common key.