Zero-Power IoT Authentication via Relay-Based Challenge Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The authentication process for zero-power devices, such as ambient power-enabled Internet of Things (A-IoT) devices, is complex and requires simplification to reduce calculation complexity while enabling network access.
Innovation Solution
An authentication method involving a first device receiving an authentication parameter, sending it to a second device, and authenticating based on pre-shared information, including challenge information, to simplify the process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication procedure is used between UE and core network, then authentication reliability is improved, but calculation complexity and device complexity increase
Solution Approach 1:
The authentication process is divided into two distinct phases: a first authentication phase between the first device and core network side device, and a second authentication phase between the first device and second device. This segmentation allows the complex authentication logic to be distributed across multiple components, reducing the calculation burden on any single device while maintaining overall authentication reliability.
Solution Approach 2:
The first device acts as an intermediary that receives authentication parameters from the core network side device and facilitates authentication with the second device. This intermediary role allows the core network to maintain strong authentication controls while simplifying the second device's requirements, thus resolving the contradiction between authentication reliability and device complexity.
2Reliability
If complex key architecture is used for authentication, then authentication security is improved, but ease of operation deteriorates
Solution Approach 1:
The key architecture is segmented into different key pairs: a first key pair for authentication between the first device and core network side device, and a second key pair for authentication between the first device and second device. This segmentation allows each authentication step to use simpler, device-specific keys rather than requiring the second device to handle complex key operations, thereby improving ease of operation while maintaining security.
Solution Approach 2:
Each device uses its own key pair for authentication operations: the first device uses its first key pair to authenticate with the core network and second device, while the second device uses its second key pair for mutual authentication. This self-service approach eliminates the need for the second device to perform complex key management operations, improving ease of operation without compromising authentication security.
3Adaptability or versatility
If zero-power devices need network access, then adaptability is improved, but calculation complexity increases
Solution Approach 1:
The authentication process is segmented such that the first device handles complex authentication operations with the core network, while the second device (zero-power device) only participates in simpler authentication steps. This segmentation enables zero-power devices to access the network without requiring them to perform complex calculations, thus improving adaptability while keeping calculation complexity manageable.
Solution Approach 2:
The first device serves as an intermediary that assists the second device in the authentication process. By receiving authentication parameters from the core network and facilitating authentication with the second device, the first device enables zero-power devices to access the network without requiring them to handle complex authentication logic, thereby improving adaptability while reducing calculation complexity requirements.
Data Source
AI summary
The present application relates to an authentication method. The method includes the following. A first device receives a first message from a core network side device, where the first message carries an authentication parameter. The first device sends a second message to a second device, where the second message carries the authentication parameter. The first device receives a third message from the second device, where the third message carries first authentication information, the first authentication information is calculated by the second device based on the authentication parameter and pre-shared information, the pre-shared information is shared by the second device and the first device and/or the core network side device, and the pre-shared information includes challenge information. The first device authenticates the second device based on the first authentication information.