Time-Dependent Message Authentication via Hash Functions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile communication networks and computer-based networks are vulnerable to vulnerabilities such as caller ID manipulation and cryptographic attacks like message spoofing and man-in-the-middle attacks, which threaten data security and integrity.
Innovation Solution
Implementing a time-dependent authentication system that uses hash functions to verify the authenticity of sending devices by combining unique identification information with precise time stamps, ensuring that only valid messages are recognized and preventing spoofing and man-in-the-middle attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used, then ease of operation is maintained, but reliability is compromised due to vulnerability to spoofing and man-in-the-middle attacks
Solution Approach 1:
The system performs preliminary authentication by generating cryptographic proof of device identity and time synchronization before message transmission. The sending device computes an authentication field using a hash function that incorporates device identity and time information, then transmits this proof with the message, enabling verification before processing the actual message content.
Solution Approach 2:
The patent introduces cryptographic hash functions and time synchronization mechanisms as intermediaries between sending and receiving devices. These intermediaries enable authentication without requiring direct trust relationships, as the hash function acts as a neutral mediator that both parties can independently compute and verify.
2Reliability
If time-dependent authentication with hash functions is implemented, then reliability is improved, but ease of operation deteriorates due to additional verification steps
Solution Approach 1:
The authentication mechanism is designed to be self-service, where both sending and receiving devices independently compute the same authentication field using identical algorithms, device identities, and time information. Each device serves itself by generating and verifying the cryptographic proof without requiring manual intervention or external authentication services.
Solution Approach 2:
The system creates a cryptographic copy of the device identity and time information through the hash function. This copy (the authentication field) can be transmitted and verified independently, allowing the receiving device to verify authenticity without needing to access or compare the actual device identity or time source directly.
3Reliability
If cryptographic authentication fields are attached to messages, then data security is enhanced, but productivity decreases due to additional processing time
Solution Approach 1:
The system applies partial authentication by computing the hash function only on critical elements (device identity and time information) rather than the entire message content. This selective approach provides sufficient authentication for verifying message origin and timing while minimizing the computational overhead compared to hashing the complete message.
Solution Approach 2:
The authentication field uses parameter changes by incorporating time information that continuously changes into the static device identity. This dynamic parameter (time) ensures that each authentication is unique and valid only for its specific time window, while the computational complexity remains manageable through efficient hash function design.
Data Source
AI summary
Various implementations described herein are directed to providing time-dependent authentication of a sending device. A message to a designated receiver is prepared. A portion of at least one secret identifier value of the sending device is retrieved. A portion of time information is retrieved. An authentication field is produced using the portion of the at least one secret identifier value and the portion of the time information. The authentication field is attached to the message. The message is transmitted to the designated receiver.