Trusted Ring Authentication Key Generation for IoT Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Internet of Things (IoT) faces significant security challenges due to the lack of effective security mechanisms, which compromise the privacy, integrity, and access control of connected entities, necessitating a robust authentication method for secure communication among peers.
Innovation Solution
A method for generating and processing authentication keys within a trusted ring of peers, where each peer's security credentials are generated based on its features, and an authentication key is created using a combination of public and private keys, allowing for secure authentication and verification even with fewer than all peers authenticated, utilizing techniques like ICMetric for unique device identification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security mechanisms are implemented in IoT, then security protection is improved, but device complexity and implementation difficulty increase
Solution Approach 1:
The security system is segmented into multiple independent peers forming a ring structure, where each peer generates its own security credentials based on device features. This distributes the security implementation complexity across multiple devices rather than requiring a complex centralized security mechanism in each device.
Solution Approach 2:
Each peer device autonomously generates its own security credentials by measuring its own hardware features and executing key generation algorithms locally. This self-service approach eliminates the need for external security configuration and reduces implementation complexity while maintaining strong security protection.
2Reliability
If all peers must be authenticated for security, then authentication reliability is improved, but system availability deteriorates when peers are absent
Solution Approach 1:
The system accepts partial authentication where a subset of peers in the ring can authenticate transactions without requiring all peers. The authentication key is generated combining credentials from available peers, allowing the system to function with partial participation while maintaining security through the cryptographic combination of multiple credentials.
Solution Approach 2:
The peer ring structure is dynamic and adaptable, allowing peers to join and leave the ring without reconfiguring the entire system. The authentication mechanism dynamically adjusts to the current set of available peers, combining their credentials to generate valid authentication keys, thus maintaining both security and availability.
3Speed
If security credentials are stored for verification, then authentication speed is improved, but security vulnerability increases from storage requirements
Solution Approach 1:
The system extracts and discards the private key credentials after they are used to generate the authentication key. Only the public verification data and the final authentication key are retained. This removes the vulnerable stored private credentials while maintaining the ability to verify authentication, thus improving security without sacrificing authentication speed.
Solution Approach 2:
The private key credentials are discarded after use in authentication key generation, eliminating the security vulnerability of stored private keys. The system recovers authentication capability through the generated authentication key, which can be used for verification without requiring the original private credentials to be stored.
Data Source
AI summary
A method for generating an authentication key for providing a digital signature at a device for authenticating an output from a ring comprising a plurality of peers, the method comprising generating respective security credentials for each peer of a plurality of peers constituting a ring of peers, at least one security credential being generated in dependence on one or more feature of the respective peer device; generating a ring key in respect of the ring in dependence on the respective security credential of each peer constituting the ring; and generating an authentication key in dependence on the ring key, a security credential of a first peer and respective security credentials of at least one of the other peers.