Unidirectional Data Source Authentication via Third-Party Challenge
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for authenticating data sources, particularly in untrusted devices, require bidirectional communication and complex challenge-response protocols, which are inefficient and cumbersome, especially in scenarios like public transport ticket verification.
Innovation Solution
A unidirectional communication method where a third-party challenger generates and distributes a challenge, allowing the test device to authenticate the data source through a single message from the device to be tested, eliminating the need for bidirectional communication and simplifying the authentication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a bidirectional challenge-response protocol is used for authentication, then data source authentication can be performed securely, but the communication complexity and time required increase
Solution Approach 1:
The challenge value is generated and made available to both the test device and the device to be tested in advance, before the actual authentication takes place. This eliminates the need for real-time bidirectional communication during the authentication process, as both parties already possess the challenge value needed to perform the authentication.
Solution Approach 2:
A third-party system acts as an intermediary to generate and distribute the challenge value to both the test device and the device to be tested. This mediator eliminates the need for direct bidirectional communication between the test device and the device being tested, simplifying the communication protocol while maintaining security.
2Reliability
If a bidirectional challenge-response protocol is used for authentication, then data source authentication can be performed securely, but the authentication time increases
Solution Approach 1:
The challenge value is generated and distributed to both parties in advance, allowing the authentication to be performed immediately when needed without waiting for challenge-response exchanges. This preliminary provision of the challenge value significantly reduces the authentication time while maintaining security through the use of cryptographic signatures.
3Reliability
If bidirectional communication is required for authentication, then secure challenge-response authentication is possible, but device involvement and connection requirements increase
Solution Approach 1:
The third-party system serves as a mediator that distributes the challenge value to both the test device and the device to be tested, eliminating the need for direct bidirectional communication between them. This reduces device involvement to minimal unidirectional data transmission while maintaining authentication security through cryptographic verification.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention provides a method for verifying a data set stored in a device (D) under test using a test device (P) via a challenge-response procedure. The challenge generator (C) is designed as an external challenge generator (C) distinct from the test device (P) and provides the challenge to both the device (D) and the test device (P). The test device (P) verifies a challenge received from the device (D) using a challenge received from the challenge generator (C) or calculated in coordination with the challenge generator (C).