Server-Mediated Device Authentication Without User-Side Key Storage

The patent introduces a server as an intermediary that holds the encryption key and performs the cryptographic operations. The server receives data requests from user devices, generates encrypted random numbers using the encryption key, and sends them to user devices. This mediator approach allows authentication without requiring user devices to store or manage cryptographic keys, thus maintaining security while reducing complexity at the user device level.

The patent extracts the cryptographic key management functionality from the user device and relocates it to the server. By taking out the key storage and key-based encryption operations from the user device, the system eliminates the need for user devices to handle sensitive cryptographic materials, thereby simplifying deployment and maintenance while preserving authentication security through server-side key management.

The server acts as an intermediary that provides cryptographic services to user devices without requiring keys to be stored on the user devices. The server generates encrypted random numbers on-demand in response to data requests, allowing user devices to perform authentication operations with minimal local storage requirements while maintaining full authentication capability through server-supported cryptographic operations.

The patent employs ephemeral random numbers that are generated on-demand by the server and used temporarily for authentication purposes. These short-lived cryptographic values are discarded after use, eliminating the need for persistent key storage on user devices. The encrypted random numbers serve their authentication purpose and are then discarded, reducing memory footprint while maintaining authentication versatility.