Zero-Knowledge Authentication Using Device-Specific Key Pairs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional device-to-device communication systems face challenges in secure authentication, particularly in scenarios where passwords can be intercepted or misused, and in devices with limited display space, and reliance on intermediate servers can lead to vulnerabilities during network failures.
Innovation Solution
An electronic device generates a unique key pair based on device properties, time, and location, using zero-knowledge information for authentication without revealing the secret key, enabling secure communication without passwords or intermediate servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password-based authentication is used for device-to-device communication, then authentication can be performed between devices, but the password may be intercepted by fraudulent parties leading to security risks and unauthorized access
Solution Approach 1:
The patent extracts the authentication credential from being a shared secret (password) stored on devices, and instead uses public key infrastructure where only public keys are exchanged. The private key never leaves the generating device, eliminating the interception vulnerability of traditional password-based authentication.
Solution Approach 2:
The patent introduces a trusted authority server as an intermediary that generates and distributes public keys to devices. This mediator enables secure authentication without requiring devices to share secret information, thus preventing password interception while maintaining authentication reliability.
2Ease of operation
If passwords are pre-stored on a third-party server to facilitate authentication, then secured authentication between devices can be enabled, but the stored passwords may be maliciously accessed and misused by fraudulent parties
Solution Approach 1:
The patent removes passwords entirely from the system architecture. Instead of storing passwords on servers, the system uses public key cryptography where only non-sensitive public keys are stored on the trusted authority server, eliminating the risk of server password compromise.
Solution Approach 2:
The patent uses public keys as safe copies that can be freely distributed and stored without security risks. The public key is a mathematical copy that enables authentication verification without exposing any secret information, replacing the need for storing sensitive password copies on servers.
3Reliability
If authentication is performed via an intermediate server, then secured authentication between multiple devices can be achieved, but network failures or downtimes may affect the authentication process
Solution Approach 1:
The patent performs preliminary actions by pre-distributing public keys to devices through the trusted authority server during normal operation. Once devices have their public keys cached locally, they can perform authentication independently without real-time server connection, preventing network failures from disrupting authentication.
Solution Approach 2:
The patent enables each device to have local authentication capability by storing its own public key and the public keys of authorized devices locally. This distributed local storage eliminates the single point of failure represented by the intermediate server, allowing authentication to proceed during network outages.
4Reliability
If passwords are used for secure communication between devices, then authentication can be established, but in devices with limited display screen space it may be difficult for users to provide passwords
Solution Approach 1:
The patent implements self-service authentication where devices automatically generate and manage their own public keys without requiring user input. The authentication process occurs automatically in the background, eliminating the need for users to manually enter passwords on devices with limited display interfaces.
Data Source
AI summary
An electronic device generates a first key pair associated with the electronic device. A first secret key of the first key pair is generated based on device properties including identification information of the electronic device. The electronic device transmits a communication request to a verifier device. The electronic device generates zero-knowledge information which is based on the generated first secret key. A first public key of the first key pair is stored in the verifier device. The electronic device transmits the zero-knowledge information to the verifier device for a verification of the transmitted communication request. The verification of the communication request is based on the first public key. The electronic device receives verification information from the verifier device based on the transmitted zero-knowledge information and a successful verification of the verification of the transmitted communication request. The electronic device communicates with the verifier device based on the received verification information.