Lightweight authentication service, system and method for computing devices and user equipment

Abstract

This disclosure relates to a lightweight authentication service, system and method that securely authenticates the identity of a secure user equipment (UE) or a device in a communication network system. The service and associated methods work by creating two partial secrets namely a first partial secret and a second partial secret. The first partial secret is generated by the manufacturer or the owner of the UE, which is stored on a secure location on the UE and the second partial secret is stored in a database storage system on a server in a cloud running an authentication service. The encryption of information elements is done by multiplying the information elements with the square of random numbers, the encrypted secrets are randomized and before transmission on the channel. The disclosure also describes a receiver UE that could either request an authentication service, running in a cloud, to authenticate a sender UE. In another example, the receiver UE includes a receiver authentication service module that enables the receiver UE to authenticate a sender UE in a peer to peer manner and a credential core in the cloud is only used as a storage medium to provide a transformed partial secret of a sender UE.