Symmetric Key Authentication Reducing Communication Stages

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional challenge and response authentication methods require four communication stages, creating an inefficient process due to the master-servant relationship between authentication devices.

Innovation Solution

Implementing an authentication system where both devices share a common symmetric key, allowing them to send challenge values and responses simultaneously, reducing the number of communication stages to three by using symmetric key cryptography for encryption and decryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional challenge and response authentication is used with master-servant relationship, then authentication can be performed, but the number of communication stages increases to four

Engineering Contradiction:
Improveauthentication capabilityVSAvoidnumber of communication stages
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies asymmetry by having one device (first authentication device) initiate the authentication process while the other device (second authentication device) responds, creating an asymmetric communication pattern that reduces the total number of communication stages from four to three, while maintaining authentication reliability through the use of challenge-response mechanisms with random numbers

Inventive Principle:
Principle #4Asymmetry

Data Source

PatentEP3306855B1Authentication device, authentication system, authentication method, and program
Publication Date: 2020.08.05 NIPPON TELEGRAPH & TELEPHONE CORP
  • EP3306855B1 patent drawingFigure 1
  • EP3306855B1 patent drawingFigure 2
  • EP3306855B1 patent drawingFigure 3

AI summary

An authentication device outputs a first challenge value corresponding to a random number along with a first authentication request. A second challenge value is input to the authentication device along with a second authentication request, and the authentication device outputs a second response value which is obtained by encrypting a value corresponding to the second challenge value by using a common key by a symmetric key cryptosystem. A first response value corresponding to the first challenge value is input to the authentication device, and the authentication device decides whether or not a decrypting result which is obtained by decrypting the first response value by using the common key and a value corresponding to the first challenge value coincide with each other.