Stylus Device Cryptographic Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional stylus authentication methods are insecure due to the vulnerability of stylus ID cloning, which allows rogue clone devices to impersonate legitimate stylus devices, compromising the authentication process.

Innovation Solution

A stylus device equipped with cryptographic hardware generates and transmits cryptographic credentials, including a unique ID, decryption key, and initial seed value, to authenticate its identity securely, using encryption techniques to prevent cloning and ensure the authenticity of digital ink authorship.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If stylus ID is transmitted without encryption, then authentication process is simple, but security is compromised allowing cloning attacks

Engineering Contradiction:
Improveauthentication process simplicityVSAvoidauthentication security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

Cryptographic credentials including encryption keys and authentication data are pre-configured in the stylus device during manufacturing or initial setup. This preliminary configuration enables the stylus to automatically perform encrypted authentication transmissions without requiring user intervention to set up security parameters, thus maintaining simplicity while enhancing security

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

Instead of transmitting the raw stylus ID which can be easily cloned, the system transmits cryptographic credentials that are difficult to replicate. The encrypted authentication data serves as a secure copy mechanism that verifies identity without exposing the actual stylus ID to potential attackers

Inventive Principle:
Principle #26Copying

2Reliability

If cryptographic credentials are transmitted over multiple channels including public channels, then authentication robustness is improved, but vulnerability to eavesdropping increases

Engineering Contradiction:
Improveauthentication robustnessVSAvoideavesdropping vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

Authentication data is segmented into multiple cryptographic credentials including different types of encryption keys and authentication tokens. These segmented credentials are transmitted through multiple channels, forcing an eavesdropper to intercept all segments simultaneously to successfully compromise authentication, thereby maintaining robustness while managing eavesdropping risk

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system dynamically changes cryptographic parameters such as encryption keys and authentication data between different transmission sessions. This parameter rotation ensures that even if one transmission over a public channel is intercepted, the compromised credentials become obsolete, maintaining overall authentication robustness

Inventive Principle:
Principle #35Parameter changes

3Reliability

If manual user intervention is required for authentication, then security control is enhanced, but user convenience deteriorates

Engineering Contradiction:
Improvesecurity controlVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The stylus device is configured to automatically perform authentication transmissions using pre-configured cryptographic credentials. The device self-manages the entire authentication process including selecting appropriate credentials, encrypting data, and transmitting through suitable channels without requiring user input, thus achieving both security control and user convenience

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3304258B1Authenticating stylus device
Publication Date: 2020.11.18 MICROSOFT TECHNOLOGY LICENSING LLC
  • EP3304258B1 patent drawingFigure 1
  • EP3304258B1 patent drawingFigure 2
  • EP3304258B1 patent drawingFigure 3

AI summary

Various methods and systems for authenticating and identifying stylus devices are described herein. In one example, a method includes receiving a value generated by the stylus device during an initialization stage. The method includes receiving a code generated from the stylus device during an authentication stage. The method also includes cryptographically authenticating an author of digital ink corresponding to the stylus device on a computer device based in part on the value and the received code.