Telemetry-Based Device Authentication Using Anomalous Security Questions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Re-establishing a root of trust in a distributed computing environment is computationally expensive and time-consuming, often requiring user intervention, which consumes significant computing resources and causes delays.
Innovation Solution
A system that utilizes historical telemetry data to generate security questions based on anomalous data points, identified through anomaly detection, to re-establish trust without user intervention, using anomaly levels to select questions tailored to the security risk level of each data processing system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional root of trust re-establishment methods are used, then security authentication is achieved, but computing resource consumption increases and time delays occur
Solution Approach 1:
The system performs preliminary actions by continuously collecting and storing telemetry data from data processing systems during normal operation. This historical data is prepared in advance and organized into activity logs, so that when authentication is needed, the system can quickly retrieve and analyze pre-collected data without requiring real-time data gathering, thus reducing authentication time while maintaining security reliability.
Solution Approach 2:
The invention extracts only the essential and relevant telemetry data points from the vast amount of collected data. By identifying and extracting specific anomalies and key parameters that are most indicative of system state, the system avoids processing unnecessary data, reducing computing resource consumption while still achieving reliable authentication through focused analysis of critical information.
2Measurement precision
If comprehensive telemetry data analysis is performed, then authentication accuracy improves, but computing resource expenditure increases
Solution Approach 1:
The system applies local quality by focusing computational resources on analyzing specific, high-value telemetry data points rather than uniformly processing all data. By identifying and concentrating analysis on anomalies and key parameters that provide the most authentication value, the system achieves high authentication accuracy while minimizing unnecessary computing resource expenditure on less relevant data.
Solution Approach 2:
The invention changes parameters by dynamically adjusting which telemetry data points are selected for analysis based on their relevance and anomaly levels. The system modifies the set of analyzed parameters according to the specific authentication context, focusing on the most discriminative features rather than maintaining a fixed comprehensive analysis set, thereby optimizing the balance between accuracy and resource consumption.
3Reliability
If user intervention is required for authentication, then security verification is performed, but operational complexity and delays increase
Solution Approach 1:
The system implements self-service by enabling automated authentication using telemetry data analysis. The data processing system itself provides the authentication information through its own historical telemetry data, eliminating the need for external user intervention. The system automatically selects relevant data points, generates authentication challenges, and verifies responses, thereby maintaining security verification while dramatically simplifying operation and reducing delays.
4Reliability
If anomaly detection is used to select security questions, then authentication security improves, but data processing complexity increases
Solution Approach 1:
The system performs preliminary anomaly detection and data classification during normal operation, organizing telemetry data by anomaly levels and relevance before authentication is needed. This pre-processing creates ready-to-use data structures that can be quickly accessed during authentication, reducing the apparent complexity during the actual authentication process while maintaining high security through anomaly-based question selection.
Data Source
AI summary
Methods and systems for authenticating data processing systems throughout a distributed environment without user intervention are disclosed. To authenticate data processing systems without user intervention, a system may include a network core and one or more data processing systems. A previously established root of trust between the network core and a data processing system may be lost and the network core may attempt to re-authenticate the data processing system using a security questionnaire. Security questions included in the security questionnaire may be based on historical telemetry data and may be chosen based on a degree of anomalousness of data points of the telemetry data. The network core may provide the data processing system with a security questionnaire and the data processing system may use similar telemetry data to respond to the security questionnaire. If the answers to the security questions are considered accurate, the data processing system may be re-authenticated.