Service Gateway SRP Login for Secure Power Plant Device Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securing remote access to devices in power generation systems lack robustness against various attack variants, such as eavesdropping, data manipulation, and unauthorized access, particularly in scenarios involving multiple communication partners.
Innovation Solution
A method utilizing a service gateway for user authentication, where the device's access authorization is stored, employing the SRP protocol with three communication partners (device, service gateway, and user's access device) to securely agree on a session key without transferring it, ensuring tamper-proof access and preventing unauthorized access by using a device secret and its image, which are not directly exchanged.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a service gateway is introduced to manage user authentication for multiple devices, then access security and centralized authorization are improved, but system complexity and communication overhead increase
Solution Approach 1:
The patent introduces a service gateway as an intermediary component that centralizes authentication management. The gateway stores device secrets and mediates authentication between users and multiple devices, eliminating the need for each device to independently verify user credentials. This resolves the contradiction by improving security through centralized control while managing complexity through a dedicated authentication service rather than distributing it across all devices.
Solution Approach 2:
The service gateway performs multiple functions: storing device secrets, verifying user credentials, generating session keys, and managing authentication for multiple devices. By consolidating these diverse authentication-related functions into a single universal component, the system improves security while avoiding the complexity of implementing each function separately in every device.
2Reliability
If direct device-specific login data is required for each device, then authentication security is improved, but ease of access and user convenience deteriorate
Solution Approach 1:
The service gateway provides a universal authentication interface that works across multiple devices. Users authenticate once with the gateway, which then handles verification for any registered device. This eliminates the need for users to remember and enter device-specific credentials for each device, significantly improving convenience while maintaining security through the gateway's centralized verification process.
Solution Approach 2:
The service gateway automatically manages device secret storage, credential verification, and session key generation without requiring user intervention for each authentication event. The gateway self-services the authentication process by comparing user credentials against stored device secrets and automatically establishing secure sessions, freeing users from complex manual authentication procedures.
3Ease of operation
If device secrets are transmitted during authentication, then authentication functionality is achieved, but security against interception and unauthorized access deteriorates
Solution Approach 1:
The patent extracts the device secret from the authentication exchange between user and device. Instead of transmitting the actual device secret during authentication, the service gateway keeps the secret stored securely and only uses it for verification purposes. The authentication process extracts only the necessary verification information without exposing the secret itself, preventing interception while maintaining functionality.
Solution Approach 2:
The service gateway creates and stores an image or copy of the device secret securely, separate from the authentication exchange. This copy is used for verification without the original secret being transmitted. The distinction between the stored secret image and the authentication process ensures that even if authentication data is intercepted, the actual device secret remains protected.
4Reliability
If session keys are transmitted between communication partners, then secure communication is established, but vulnerability to data manipulation and unauthorized access increases
Solution Approach 1:
The service gateway acts as an intermediary in session key establishment. Rather than devices directly exchanging and trusting each other with session keys, the gateway mediates the key agreement process, verifying credentials and facilitating secure key exchange. This intermediary role prevents direct manipulation between devices while establishing secure communication through trusted third-party coordination.
Solution Approach 2:
The session key is extracted from the authentication process and established through the service gateway's verification of device secrets. The key is generated and distributed only after successful authentication verification, separating key establishment from direct device-to-device communication. This extraction ensures that keys are only created when authentication is verified, preventing unauthorized key generation or manipulation.
Data Source
Figure 1
Figure 2
AI summary
The application relates to a method for logging a user (14) in to a device (10) by means of a service gateway (12), wherein access authorisation of the user (14) for the device (10) is stored on the service gateway (12), the method comprising the steps of: - authenticating the user (14) on the service gateway (12), - sending a device access request by the user (14) to the service gateway (12), with specification of an identifier for the device (10), - comparing a device secret stored on the service gateway (12) with a copy of the device secret stored on the device (10) via an SRP protocol, the comparison being performed via a data connection between an access device (16) of the user (14) and the service gateway (12) and a data connection between the access device (16) and the device (10). If the comparison is successful, a session key is agreed upon between the device (10) and the service gateway (12). The application further relates to a power generation plant.