Mergeable Stateful Signatures for Low-Latency IoT Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing digital signature schemes for resource-constrained IoT devices are computationally expensive and energy-intensive, leading to high latency and security vulnerabilities, particularly in protocols like MQTT, where quick authentication is critical for applications such as health monitoring and smart locks.

Innovation Solution

The Mergeable Stateful Signatures (MSS) scheme allows precomputation and storage of signature data, enabling efficient online signing and verification with reduced energy consumption by utilizing mergeable signatures and time-based one-time passwords (TOTP) systems, suitable for IoT devices with limited computational power and energy.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional public-key cryptography (PKC) is used for authentication, then security is improved, but computational latency and energy consumption increase significantly

Engineering Contradiction:

Improveauthentication securityVSAvoidauthentication latency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by precomputing and storing signature components (such as hash chains or stateful signature data) before actual authentication is needed. This allows the authentication process to use these precomputed values rather than performing full cryptographic operations in real-time, thereby reducing latency while maintaining security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent segments the authentication process into multiple phases: an offline phase for heavy computation and state preparation, and an online phase for lightweight verification. This segmentation allows computationally intensive operations to be performed when resources are available, while authentication itself remains fast.

Inventive Principle:

Principle #1Segmentation

2Reliability

If traditional public-key cryptography (PKC) is used for authentication, then security is improved, but energy consumption increases excessively

Engineering Contradiction:

Improveauthentication securityVSAvoiddevice energy consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent performs energy-intensive cryptographic operations in advance during an offline setup phase, storing the results for later use. During actual authentication, only lightweight operations are required, dramatically reducing energy consumption on battery-powered IoT devices while maintaining the security benefits of public-key cryptography.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent changes the computational parameters by using precomputed signature states that require minimal processing during authentication. This transforms the authentication operation from a high-energy full cryptographic computation to a low-energy verification process using predetermined parameters.

Inventive Principle:

Principle #35Parameter changes

3Productivity

If symmetric key cryptography (SKC) is used instead of PKC, then computational overhead is reduced, but key management issues and security vulnerabilities arise

Engineering Contradiction:

Improveauthentication efficiencyVSAvoidsecurity vulnerability

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent introduces a stateful signature mechanism as an intermediary that combines benefits of both asymmetric and symmetric cryptography. The server maintains a stateful structure that enables efficient verification similar to symmetric keys, while the client uses asymmetric operations only during setup, eliminating the need for the server to store secret keys and thus preventing impersonation attacks.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Reliability

If hash chains are used for authentication, then key management issues are overcome, but computation becomes expensive and lifespan is limited

Engineering Contradiction:

Improvekey management securityVSAvoidcomputation efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent uses preliminary action by precomputing hash chain values or stateful signature components during an offline phase and storing them for later use. This allows the authentication process to use these precomputed values rather than performing expensive hash computations in real-time, thereby improving computation efficiency while maintaining the security benefits of hash-based approaches.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12549559B2Lightweight network authentication for resource constrained devices via mergeable stateful signatures

Publication Date: 2026.02.10 RGT UNIV OF CALIFORNIA

AI summary

Signature-based authentication is a core cryptographic primitive essential for most secure networking protocols. A new signature scheme, MSS, allows a client to efficiently authenticate herself to a server. The new scheme is modeled in an offline/online model where client online time is premium. The offline component derives basis signatures that are then composed based on the data being signed to provide signatures efficiently and securely during run-time. MSS requires the server to maintain state and is suitable for applications where a device has long-term associations with the server. MSS allows direct comparison to hash chains-based authentication schemes used in similar settings, and is relevant to resource-constrained devices, e.g., IoT. MSS instantiations are derived for two cryptographic families, assuming the hardness of RSA and decisional Diffie-Hellman (DDH) respectively. Then used is the new scheme to design an efficient time-based one-time password (TOTP) protocol.