Low-Complexity Authentication for Zero-Power Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Zero-power devices face challenges in completing authentication procedures due to high computational complexity, long running times, and high power consumption, making existing authentication protocols unsuitable for their limited resources.
Innovation Solution
An authentication method that involves calculating authentication information using a shared key, encrypted sequence number, and random number, reducing computational and signaling exchanges to minimize power consumption and delay.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication procedures are applied to zero-power devices, then authentication security can be maintained, but power consumption increases and running time extends beyond device energy capacity
Solution Approach 1:
The patent changes the computational complexity parameters of the authentication protocol by replacing traditional high-complexity cryptographic functions with simplified authentication mechanisms. This allows zero-power devices to complete authentication within their limited energy capacity while maintaining security through alternative verification methods that rely more on pre-shared keys and simpler computational operations.
Solution Approach 2:
The authentication procedure is segmented into distinct phases: a first authentication procedure using simplified methods for initial verification, and a second authentication procedure using traditional methods for enhanced security verification. This segmentation allows zero-power devices to participate in authentication without being burdened by the full computational load of traditional protocols.
2Reliability
If traditional authentication procedures are applied to zero-power devices, then authentication completeness can be achieved, but running time exceeds device energy capacity
Solution Approach 1:
The patent modifies the time parameter by optimizing the authentication protocol execution time through parameter adjustments in the cryptographic functions. By tuning these parameters, the authentication can be completed within the extended time window provided by energy harvesting, ensuring authentication completeness without exceeding device energy capacity.
Solution Approach 2:
Authentication-related data and credentials are pre-synchronized between zero-power devices and the network before the device enters sleep mode. This preliminary action ensures that when the device wakes up, authentication can proceed quickly without requiring lengthy real-time computations, thus completing authentication within the available energy window.
3Reliability
If traditional authentication procedures are applied to zero-power devices, then security requirements can be satisfied, but computational complexity increases device resource demands
Solution Approach 1:
The patent applies parameter changes to the cryptographic function complexity by selecting and configuring authentication algorithms with appropriate computational characteristics. The system adjusts parameters such as key lengths, iteration counts, and function selection to match the computational capabilities of zero-power devices while maintaining security requirements through carefully chosen security parameters.
Solution Approach 2:
The authentication process is divided into two distinct procedures with different computational complexity levels. The first procedure uses low-complexity operations suitable for zero-power devices, while the second procedure uses higher-complexity operations for enhanced security verification. This segmentation allows the system to satisfy security requirements without imposing excessive computational demands on resource-constrained devices.
Data Source
Figure 1~2
Figure 3~4
Figure 5~6(b)
AI summary
The disclosure relates to an authentication method, a device, a computer-readable storage medium, a computer program product, and a computer program. The method includes the following. A first device receives a first message, where the first message contains an encrypted sequence number, a first random number, and first authentication information. The first device calculates second authentication information based on a shared key, the encrypted sequence number, and the first random number. If the first authentication information is identical to the second authentication information, the first device calculates third authentication information based on a first key, where the first key is related to the shared key. The first device sends a second message, where the second message carries the third authentication information.