Use-Authorization Device Multi-Level One-Way Function Memory Optimization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing use-authorization devices face challenges with high computing time and memory requirements, especially in systems with limited resources, due to the need to calculate and store numerous consecutive output values using one-way functions, making them inefficient for large-scale authorization systems and systems with restricted memory and computing power.
Innovation Solution
The implementation of a multi-level system using one-way function F(vi,const) with support points s(i) to reduce computational workload, where function values are calculated and stored in descending order across levels, and intermediate values are reused and reset to minimize memory and computing requirements, allowing for scalable and efficient operation in devices with limited resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If all requisite values are saved in the key unit for large-scale authorizations, then authorization capability is improved, but memory space requirements increase significantly
Solution Approach 1:
The patent segments the authorization process into two parts: the key unit generates and transmits only the current code value and counter state, while the central authorization unit stores the complete authorization data. This segmentation allows the key unit to have minimal memory requirements while the system as a whole maintains high authorization capability.
Solution Approach 2:
The patent introduces a central authorization unit as an intermediary between the key unit and the authorization database. This intermediary handles the storage and retrieval of authorization data, allowing the key unit to operate with minimal local storage while maintaining access to comprehensive authorization information.
2Reliability
If consecutive output values are calculated iteratively using one-way functions, then security is improved, but computing time increases
Solution Approach 1:
The patent performs preliminary calculation of consecutive output values during an initialization phase before runtime. By pre-calculating and storing the authorization data in the central authorization unit, the system avoids performing iterative one-way function calculations during actual authorization operations, thus maintaining high security while reducing runtime computing time.
3Reliability
If the key unit calculates output values from a starting value using one-way functions, then authorization security is improved, but both memory space and computing time fluctuate considerably
Solution Approach 1:
The patent segments the computational burden by having the key unit perform only minimal calculations (generating current code and counter state) while the central authorization unit handles the storage and management of pre-calculated authorization data. This segmentation stabilizes resource requirements across the system.
Solution Approach 2:
The patent performs the computationally intensive task of calculating consecutive output values during initialization, before runtime operations. This preliminary action eliminates fluctuations in computing time and memory requirements during actual authorization operations, as the data is pre-computed and stored.
Data Source
AI summary
This description is given of a use-authorization device for security-related applications, in particular access control to secure areas or securing vehicles with a user operated key unit for generating consecutive, alternating user code information which exhibits a sequence of consecutive function values vi+1=F(vi, const) for i=0, . . . , N through the repeated use of a one-way function F(vi, const), which function values are used in inverse order to the sequence formation to create the consecutive user code information, and an application-sided processing unit for determining actual authorization information which is dependent upon the user code information received from the key unit and for performing a use-authorization checking process by comparing this actual authorization information with target authorization information saved in the application, as well as for generating use-release information depending on the result of the comparison, wherein the target authorization information has a function value v; which has been transferred from the user code information processed during the previous positive use-authorization operation. The special feature of the invention is that there is a certain number of levels G provided, with at least one support point and one intermediate value, from which a certain number of iterative function value calculations can be performed in each level by means of the one-way function F(vi,const) wherein there are G=L(N)/b levels, with N as the starting value, L(N) as the number of bits required for representing N in the dual system and b as the basis.