Image-Forming Apparatus Authentication with Time-Delayed Secret Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for exchangeable components in electronic devices, such as image-forming apparatuses, are vulnerable to information analysis attacks and increase memory and cost when enhancing resistance, leading to potential device failures and quality deterioration.
Innovation Solution
An authentication method that delays the exposure of critical authentication data until a pre-set reference time, using a challenge-response mechanism with timer-controlled access to restriction data, ensuring resistance to attacks without increasing memory scale.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the number of variations of secret information is increased to enhance resistance against information analysis attacks, then security is improved, but the scale of non-volatile memory increases and cost rises
Solution Approach 1:
The authentication apparatus performs preliminary actions by storing multiple candidate values of secret information in advance before any authentication attempt. This preliminary preparation enables the system to withstand information analysis attacks without requiring additional memory during the authentication process itself, as all necessary secret variations are already stored and ready for use.
Solution Approach 2:
The invention changes the parameter of secret information by using multiple candidate values that can be selectively applied during authentication. Instead of relying on a single secret value that would require multiple storage locations, the system transforms the approach by storing multiple valid candidates of the same secret information, allowing the authentication to proceed with any one of them while maintaining security against analysis attacks.
2Reliability
If password authentication is performed using different passwords for each authentication apparatus, then security is improved, but the complexity of the authentication system increases
Solution Approach 1:
The authentication target apparatus is designed with universal functionality to support multiple different passwords (candidate values of secret information). A single authentication target apparatus can be authenticated by any authentication apparatus using any of the stored candidate values, eliminating the need for separate authentication systems for each password variation and reducing overall system complexity.
Solution Approach 2:
The invention uses copying by storing multiple candidate values of secret information in the authentication apparatus. These candidate values are essentially copies of the same secret information that can be used interchangeably for authentication purposes, allowing the system to maintain security through multiple passwords without requiring complex differentiation mechanisms.
Data Source
AI summary
An authentication apparatus is provided and performs authentication on an authentication target apparatus that includes first allowance data used to determine whether a response to an authentication request from the authentication apparatus is allowed. The authentication apparatus includes timer circuitry measuring a time for which the authentication apparatus is energized; a memory storing restriction data that becomes readable after the measured time reaches a pre-set reference time; communication circuitry transmitting, to the authentication target apparatus, second allowance data that is based on the restriction data read from the memory and subjected to verification by the authentication target apparatus using the first allowance data; and processing circuitry authenticating the authentication target apparatus based on an authentication response from the authentication target apparatus when the verification performed on the second allowance data using the first allowance data is successful.