SoC Device Authentication via Ephemeral Shared Data Sets
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The digital environment's reliance on shared secrets for security is vulnerable to hacking, as secrets are difficult to keep confidential and once compromised, they can be rapidly proliferated, undermining the reliability and security of digital certificates and authentication processes.
Innovation Solution
Implementing a system on a chip (SoC) that uses ephemeral shared data sets dynamically altered and synchronized across processing devices to generate a dynamic value for authentication and encryption, eliminating the need for static secrets and improving communication security by constantly changing the data set.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If shared secrets are used for authentication, then device verification can be performed, but the security is vulnerable to hacking and credential theft
Solution Approach 1:
The patent replaces static shared secrets with dynamic ephemeral data sets that are continuously altered and synchronized between devices. The authentication mechanism uses time-varying data that changes with each authentication event, making captured credentials useless for future attacks. This dynamic approach resolves the contradiction by maintaining authentication reliability while eliminating the vulnerability to credential theft inherent in static secret systems.
Solution Approach 2:
The system changes the fundamental parameter of authentication data from static to ephemeral. Instead of using persistent secrets that remain unchanged, the patent employs data sets with extremely short lifecycles that are regenerated continuously. This parameter change transforms the security model from one vulnerable to credential harvesting into one where each authentication uses unique, time-limited credentials that cannot be reused.
2Ease of operation
If static secrets are used for security, then authentication can be performed, but once compromised the secrets can be rapidly proliferated
Solution Approach 1:
The patent implements authentication using ephemeral data sets that exist only for extremely brief periods and are discarded immediately after use. Each authentication event consumes a new set of credentials that cannot be reused, analogous to disposable security tokens. This approach maintains ease of operation by automating the generation and management of these short-lived credentials while ensuring confidentiality since they never persist long enough to be compromised or leaked.
Solution Approach 2:
The system employs periodic regeneration of authentication credentials through continuous alteration and synchronization of ephemeral data sets. Instead of using the same secrets repeatedly, the system generates new authentication data at regular intervals or with each authentication event. This periodic renewal prevents credential proliferation because even if credentials are captured, they become invalid immediately after the next regeneration cycle.
3Reliability
If shared secrets are transmitted for authentication, then device verification is possible, but transmission creates security vulnerabilities
Solution Approach 1:
The patent performs preliminary synchronization of ephemeral data sets between devices before authentication is needed. The data sets are continuously updated and aligned in the background through secure channels, so when authentication occurs, both devices already possess identical current credentials without needing to transmit them. This preliminary action eliminates transmission vulnerabilities while maintaining verification reliability, as the credentials are never exposed during communication.
Data Source
AI summary
Methods and computing devices configured to implement the methods for authenticating processing devices on a system on chip (SoC) for encrypted communication. An SoC may include a plurality of memories configured to store equivalent ephemeral shared data sets. A first processing device of the SoC may select first elements from a first ephemeral shared data set, generate a rule set indicating the first elements, send the rule set to a second processing device of the SoC, and generate a first result based on the first elements. The second processing device may receive the rule set, select second elements from a second ephemeral shared data set, generate a second result based on the second elements, and send the second result to the first processing device. The first processing device may receive the second result and authenticate the second processing device based on a comparison of the first and second results.