Wireless Actuator Authentication via Challenge-Response Protocol

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current wireless control systems for gates and garages are vulnerable to hacking and eavesdropping, despite countermeasures like rolling codes, as attackers can record and replicate signals, compromising security.

Innovation Solution

Implementing a challenge-response authentication mechanism using data packets with random sequences and timestamps, where user and base apparatuses exchange encrypted packets with randomly positioned identity data, ensuring only authorized access and enhancing security through mutual authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If rolling codes are used to change the digital code after every control command, then security against code recovery is improved, but vulnerability to recording and replay attacks persists

Engineering Contradiction:
Improvesecurity against code recoveryVSAvoidvulnerability to recording and replay attacks
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary authentication actions before executing the control command. The base apparatus challenges the keyfob with a request containing a random number, and the keyfob must respond with a specific code derived from this challenge. This preliminary challenge-response sequence prevents replay attacks because each authentication requires a fresh response to a unique challenge, not just a pre-recorded sequence of codes.

Inventive Principle:
Principle #10Preliminary action

2Ease of operation

If simple digital codes are transmitted wirelessly, then ease of operation is maintained, but security against eavesdropping deteriorates

Engineering Contradiction:
Improvewireless control convenienceVSAvoideavesdropping vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system dynamically changes the code parameters for each transmission. Instead of using a static or simply rolling code, the keyfob generates a response code based on a challenge from the base apparatus. The code includes a random number component and is transformed through cryptographic functions, ensuring that each transmitted code has unique parameters that cannot be easily predicted or replicated by eavesdroppers.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If authentication mechanisms are added to wireless control systems, then security against hacking is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity against hackingVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system introduces a challenge-response mechanism as an intermediary authentication step. The base apparatus generates a challenge containing a random number, which the keyfob processes through its code generation logic to produce an authenticated response. This intermediary challenge sequence adds security without requiring complex cryptographic hardware, as it leverages the existing code generation capabilities of the keyfob in a structured authentication protocol.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP3556051B1Apparatuses, system, and methods for controlling an actuator through a wireless communications system
Publication Date: 2024.03.27 SARONIKOS TRADING & SERVICES UNIPESSOAL LDA
  • EP3556051B1 patent drawingFigure 1
  • EP3556051B1 patent drawingFigure 2
  • EP3556051B1 patent drawingFigure 3

AI summary

The invention relates to a user apparatus (103), a base apparatus (104), and a method for authenticating these apparatuses (103,104) through exchanging data packets. The user apparatus (103) and the base apparatus (104) are paired, share a set of security algorithms and parameters, and perform a mutual authentication based on the challenge-response authentication mechanism. More in details, each of the challenge data packets (200a-200d) comprises authentication data (200a2, digest_a, digest_b, digest_c) and a set of at least two random sequences having random content and random length, wherein said random sequences are generated excluding those that, in said at least one data packet (200a-200d), produce at least one fake replica of said authentication data that at least one of said apparatuses (103,104) can erroneously detect.