White Box Crypto Authentication via Secure Token Channel
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for machine or computer authentication using cryptographic tokens face challenges such as the need for user presence, vulnerability to hacking and reverse engineering, and the insecure transmission of PIN codes over physical links.
Innovation Solution
The implementation of a white box cryptographic system that transforms cryptographic functions and keys, coupled with a crypto token, to provide secure authentication without requiring user presence. This system employs a substantially secure channel for communication between the white box and the crypto token, periodically checks for the token's presence, and initiates services with a verifiable message.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If a pincode is hardcoded and instantiated in the software for machine authentication, then user presence is not required, but the pincode becomes vulnerable to reverse engineering and extraction
Solution Approach 1:
The patent introduces a crypto token as an intermediary device between the software and the authentication authority. The token contains the secret key in hardware form, mediating the authentication process without requiring the key to be present in the software code. This resolves the contradiction by enabling automated machine authentication while protecting the secret from reverse engineering, as the key never resides in extractable software form.
2Ease of operation
If the pincode is sent over a clear physical link such as USB interface, then the interface is simple and convenient, but the pincode can be observed and recorded via that link
Solution Approach 1:
The patent replaces the mechanical/electrical transmission of the pincode over a clear physical link with a cryptographic substitution mechanism. The crypto token uses its internal cryptographic functions to process and validate authentication requests without transmitting the actual secret key over the physical interface. This maintains the convenience of standard interfaces like USB while eliminating the security vulnerability of pincode interception.
3Reliability
If a user enters a pincode for crypto token validation, then strong authentication is achieved, but user presence is required which is impractical for unattended machines
Solution Approach 1:
The patent implements self-service authentication where the crypto token automatically performs validation using the secret key stored in its hardware. The system checks for the token's presence and validates authentication requests without requiring user intervention. This maintains strong authentication security while enabling unattended machine operation, as the token serves itself by autonomously verifying authentication credentials.
Data Source
AI summary
A system and method for authenticating an application that employs cryptographic keys and functions is provided with white box cryptography employed to secure the application, and to secure communications with the application. The white box includes a transformation of the application and the keys. A secure channel between the white box and a crypto token is used for communications. In some cases, the transformed keys can be employed in authenticating the white box to the crypto token. The presence of a valid crypto token can be periodically determined. In the presence of a valid crypto token, the white box can provide a verifiable message to a remote server. The remote server can verify the message and initiate a service.