TLS Device Authentication Using Certificates and Vendor IDs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Device authentication in the Internet of Things (IoT) leads to increased network resource overhead and potential information leakage.
Innovation Solution
Implementing a device authentication method using the Transport Layer Security (TLS) protocol for secure connections between electronic devices and servers, utilizing digital certificates (X.509 format) and vendor identifiers (VIDs) to authenticate devices, and generating unique keys for each device to ensure authenticity and reduce network resource demand.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional device authentication methods are used in IoT, then device security and authenticity can be verified, but network resource overhead increases and information leakage risks arise
Solution Approach 1:
The patent extracts and separates the authentication data from the device itself, storing it externally on a server. The device only retains minimal identification information, while the server holds the comprehensive authentication data including digital certificates and vendor identifiers. This extraction reduces the computational and storage burden on resource-constrained IoT devices while maintaining security.
Solution Approach 2:
The patent introduces a server as an intermediary between devices and the authentication system. The server acts as a mediator that stores authentication data, processes verification requests, and returns results to devices. This intermediary approach centralizes the heavy authentication operations, allowing devices to participate in authentication with minimal resource consumption.
2Reliability
If comprehensive authentication data is stored on devices, then authentication reliability is improved, but device storage requirements and security risks increase
Solution Approach 1:
The patent removes the burden of storing comprehensive authentication data from the device by extracting it and storing it on the server instead. The device only keeps essential identification information, while the server stores the complete authentication package including digital certificates, vendor identifiers, and device metadata.
Solution Approach 2:
The server is designed to serve multiple functions: storing authentication data for multiple devices, processing authentication requests, managing device registries, and providing verification services. This universal approach allows the system to handle authentication for numerous devices without increasing individual device complexity.
Data Source
Figure 1~3
Figure 4~5
Figure 6~7
AI summary
Disclosed in the present application are a device authentication method and apparatus, an electronic device, a server and a storage medium. The device authentication method comprises: establishing a first connection based on a TLS protocol between the electronic device and a first server; sending a first request to the first server on the basis of the first connection, the first request being used to request for identity authentication on the electronic device and generated on the basis of first information which represents a digital certificate of the electronic device; and on the basis of the first connection, receiving first response information about the first request, the first response information being sent by the first server and carrying an identity authentication result of the first server for the electronic device.