Systems and methods for distributed authentication of devices

1. A system for distributed authentication of devices to create a local internet of things connected to a cellular network, the system comprising:

a first device having a first processor, a first device public key, and a first device private key;

a second device having a second processor, a second device public key, and a second device private key;

a first machine-readable medium in operable communication with the first processor and having first instructions stored thereon that, when executed by the first processor, perform the following steps:

1a) receiving, by the first processor from the cellular network, a first warrant, a first delegation parameter, and a core public key;

1b) calculating, by the first processor based on the first warrant, the first delegation parameter, and the core public key: a first public delegation key, a first private delegation key, a first timestamp, and a first signature; and

1c) sending, by the first device to the second device, a first proxy signature message comprising the first timestamp, the first signature, the first warrant, the first public delegation key, and the first device public key; and

a second machine-readable medium in operable communication with the second processor and having second instructions stored thereon that, when executed by the second processor, perform the following steps:

2a) receiving, by the second processor from the cellular network, a second warrant, a second delegation parameter, and the core public key;

2b) calculating, by the second processor based on the second warrant, the second delegation parameter, and the core public key: a second public delegation key, a second private delegation key, a second timestamp, and a second signature;

2c) sending, by the second device to the first device, a second proxy signature message comprising the second timestamp, the second signature, the second warrant, the second public delegation key, and the second device public key;

2d) receiving, by the second device from the first device, the first proxy signature message comprising the first timestamp, the first signature, the first warrant, the first public delegation key, and the first device public key; and

2e) verifying, by the second device, the first proxy signature message,

the first device being a leader drone having a primary direct connection to the cellular network,

the second device being a swarm drone being configured to connect and authenticate directly with the leader drone, and

the performing of steps 1a, 1b, 1c, 2a, 2b, 2c, 2d, and 2e by the first device and the second device, which is configured to connect and authenticate directly with the first device, for improving the efficiency of communication of the system.

2. The system according to claim 1 , the first instructions when executed by the first processor further performing the following additional steps:

1d) receiving, by the first device from the second device, the second proxy signature message comprising the second timestamp, the second signature, the second warrant, the second public delegation key, and the second device public key; and

1e) verifying, by the first device, the second proxy signature message.

3. The system according to claim 2 , further comprising:

a third device having a third processor, a third device public key, and a third device private key; and

a third machine-readable medium in operable communication with the third processor and having third instructions stored thereon that, when executed by the third processor, perform the following steps:

3a) receiving, by the third processor from the cellular network, a third warrant, a third delegation parameter, and the core public key;

3b) calculating, by the third processor based on the third warrant, the third delegation parameter, and the core public key: a third public delegation key, a third private delegation key, a third timestamp, and a third signature; and

3c) sending, by the third device to the first device, a third proxy signature message comprising the third timestamp, the third signature, the third warrant, the third public delegation key, and the third device public key.

4. The system according to claim 3 , the third instructions when executed by the third processor further performing the following steps:

3d) receiving, by the third device from the first device, the first proxy signature message comprising the first timestamp, the first signature, the first warrant, the first public delegation key, and the first device public key; and

3e) verifying, by the third device, the first proxy signature message.

5. The system according to claim 4 , further comprising:

a fourth device having a fourth processor, a fourth device public key, and a fourth device private key; and

a fourth machine-readable medium in operable communication with the fourth processor and having fourth instructions stored thereon that, when executed by the fourth processor, perform the following steps:

4a) receiving, by the fourth processor from the cellular network, a fourth warrant, a fourth delegation parameter, and the core public key;

4b) calculating, by the fourth processor from the values of the fourth warrant, the fourth delegation parameter, and the core public key: a fourth public delegation key, a fourth private delegation key, a fourth timestamp, and a fourth signature;

4c) sending, by the fourth device to the first device, a fourth proxy signature message comprising the fourth timestamp, the fourth signature, the fourth warrant, the fourth public delegation key, and the fourth device public key;

4d) receiving, by the fourth device from the first device, the first proxy signature message comprising the first timestamp, the first signature, the first warrant, the first public delegation key, and the first device public key; and

4e) verifying, by the fourth device, the first proxy signature message.

6. The system according to claim 5 , the first instructions when executed by the first processor further performing the following steps:

1f) calculating, by the first processor, a first symmetric key;

1g) sending, by the first device to the second device, the first symmetric key;

1h) sending, by the first device to the third device, the first symmetric key; and

1i) sending, by the first device to the fourth device, the first symmetric key.

7. The system according to claim 6 , each of the third device and the fourth device being a swarm drone, and

each of the third device and the fourth device being configured to connect and authenticate directly with the leader drone.

8. The system according to claim 7 , the cellular network being a 5G cellular network.

9. The system according to claim 7 ,

each of the second device, the third device, and the fourth device having reduced, restricted, intermittent, or no direct connection to the cellular network.

10. The system according to claim 7 , the leader drone being configured to communicate directly with the cellular network on behalf of each swarm drone, and

each swarm drone being configured to prioritize communication with the leader drone over direct communication with the cellular network.

11. A method for delegation-based distributed authentication of drones, the method comprising:

a) receiving, by a leader drone (D L ), a first delegation message;

b) creating, by D L , a leader proxy signature private key (xp L ) and a leader proxy signature public key (xp L );

c) receiving, by a swarm drone (D i ), a second delegation message;

d) creating, by D i , a swarm proxy signature private key (xp i ) and a swarm proxy signature public key (yp i );

e) sending, by D L , a proxy signature broadcast message;

f) receiving, by D i , the proxy signature broadcast message;

g) verifying, by D i , the proxy signature broadcast message;

h) sending, by D i , a proxy signature unicast message;

i) receiving, by D L , the proxy signature unicast message; and

j) verifying, by D L , the proxy signature unicast message,

D L and D i being part of a system for distributed authentication of devices to create a local internet of things connected to a cellular network,

D L having a primary direct connection to the cellular network,

D i being configured to connect and authenticate directly with D L , and

the performing of steps a, b, c, d, e, f, g, h, i, and j, by D L and D i , which is configured to connect and authenticate directly with D L , for improving the efficiency of communication of the system.

12. The method according to claim 11 , the first delegation message comprising a first unique warrant (w L ), a first pair of unique delegation parameters (r L , s L ), and a core-network public key (y c ),

D L having a leader private key (x L ) and a leader public key (y L ),

both xp L and yp L being derived from the first delegation message,

xp L being derived from w L , r L , s L , and x L , and

yp L being derived from w L , r L , y c , and y L .

13. The method according to claim 12 , the second delegation message comprising a second unique warrant (w i ), a second pair of unique delegation parameters (r i , s i ), and the core-network public key (y c ),

D i having a swarm private key (x i ) and a swarm public key (y i ),

both xp i and yp i being derived from the second delegation message,

xp i being derived from w i , r i , s i , and x i , and

yp i being derived from w i , r i , y c , and y i .

14. The method according to claim 13 , the proxy signature broadcast message comprising a first timestamp (t L ), a first unique proxy signature (σ L ), the first unique warrant (w L ), the leader proxy signature public key (yp L ), and the leader public key (y L ).

15. The method according to claim 14 , t L being a timestamp nonce using x L , and σ L being derived from t L and xp L .

16. The method according to claim 15 , the step of verifying, by D i , the proxy signature broadcast message comprising application of a digital signature verification algorithm of the form:

V ( t l ,σ l ,( y c y l ) h(w i ,y i ) yp i )=True

where h(w l , y l ) is a collision resistant hash function.

17. The method according to claim 16 , the proxy signature unicast message comprising a second timestamp (t i ), a second unique proxy signature (σ i ), the second unique warrant (w i ), the proxy signature public key (yp i ), and the swarm public key (y i ).

18. The method according to claim 7 , t i being a timestamp nonce using x i , and σ i being derived from t i and xp i .

19. The method according to claim 18 , the step of verifying, by D L , the proxy signature unicast message comprising application of a digital signature verification algorithm of the form:

V ( t i ,σ i ,( y c y i ) h(w i ,y i ) yp i )=True

where h(w i , y i ) is a collision resistant hash function.

20. A system for distributed authentication of devices to create a local internet of things connected to a cellular network, the system comprising:

a first device having a first processor, a first device public key, and a first device private key;

a second device having a second processor, a second device public key, and a second device private key;

a first machine-readable medium in operable communication with the first processor and having first instructions stored thereon that, when executed by the first processor, perform the following steps:

1a) receiving, by the first processor from the cellular network, a first warrant, a first delegation parameter, and a 5G core public key;

1b) calculating, by the first processor based on the first warrant, the first delegation parameter, and the 5G core public key: a first public delegation key, a first private delegation key, a first timestamp, and a first signature; and

1c) sending, by the first device to the second device, a first proxy signature message comprising the first timestamp, the first signature, the first warrant, the first public delegation key, and the first device public key;

a second machine-readable medium in operable communication with the second processor and having second instructions stored thereon that, when executed by the second processor, perform the following steps:

2a) receiving, by the second processor from the cellular network, a second warrant, a second delegation parameter, and the 5G core public key;

2b) calculating, by the second processor based on the second warrant, the second delegation parameter, and the 5G core public key: a second public delegation key, a second private delegation key, a second timestamp, and a second signature;

2c) sending, by the second device to the first device, a second proxy signature message comprising the second timestamp, the second signature, the second warrant, the second public delegation key, and the second device public key;

2d) receiving, by the second device from the first device, the first proxy signature message comprising the first timestamp, the first signature, the first warrant, the first public delegation key, and the first device public key; and

2e) verifying, by the second device, the first proxy signature message;

the first instructions when executed by the first processor further performing the following steps:

1d) receiving, by the first device from the second device, the second proxy signature message comprising the second timestamp, the second signature, the second warrant, the second public delegation key, and the second device public key; and

1e) verifying, by the first device, the second proxy signature message comprising the second timestamp, the second signature, the second warrant, the second public delegation key, and the second device public key;

a third device having a third processor, a third device public key, and a third device private key;

a third machine-readable medium in operable communication with the third processor and having third instructions stored thereon that, when executed by the third processor, perform the following steps:

3a) receiving, by the third processor from the cellular network, a third warrant, a third delegation parameter, and the 5G core public key;

3b) calculating, by the third processor based on the third warrant, the third delegation parameter, and the 5G core public key: a third public delegation key, a third private delegation key, a third timestamp, and a third signature;

3c) sending, by the third device to the first device, a third proxy signature message comprising the third timestamp, the third signature, the third warrant, the third public delegation key, and the third device public key;

3d) receiving, by the third device from the first device, the first proxy signature message comprising the first timestamp, the first signature, the first warrant, the first public delegation key, and the first device public key; and

3e) verifying, by the third device, the first proxy signature message;

a fourth device having a fourth processor, a fourth device public key, and a fourth device private key; and

a fourth machine-readable medium in operable communication with the fourth processor and having fourth instructions stored thereon that, when executed by the fourth processor, perform the following steps:

4a) receiving, by the fourth processor from the cellular network, a fourth warrant, a fourth delegation parameter, and the 5G core public key;

4b) calculating, by the fourth processor based on the fourth warrant, the fourth delegation parameter, and the 5G core public key: a fourth public delegation key, a fourth private delegation key, a fourth timestamp, and a fourth signature;

4c) sending, by the fourth device to the first device, a fourth proxy signature message comprising the fourth timestamp, the fourth signature, the fourth warrant, the fourth public delegation key, and the fourth device public key;

4d) receiving, by the fourth device from the first device, the first proxy signature message comprising the first timestamp, the first signature, the first warrant, the first public delegation key, and the first device public key; and

4e) verifying, by the fourth device, the first proxy signature message,

the first instructions when executed by the first processor further performing the following steps:

1f) calculating, by the first processor, a first symmetric key;

1g) sending, by the first device to the second device, the first symmetric key;

1h) sending, by the first device to the third device, the first symmetric key; and

1i) sending, by the first device to the fourth device, the first symmetric key,

the first device being a leader drone having a primary direct connection to the cellular network,

the second device being a swarm drone being configured to connect and authenticate directly with the leader drone,

the third device being a swarm drone being configured to connect and authenticate directly with the leader drone,

the fourth device being a swarm drone being configured to connect and authenticate directly with the leader drone,

each respective swarm having reduced, restricted, intermittent, or no direct connection to the cellular network,

the leader drone being configured to communicate directly with the cellular network on behalf of each swarm drone,

each swarm done being configured to prioritize communication with the leader drone over direct communication with the cellular network,

the cellular network being a 5G cellular network, and

the performing of steps 1a, 1b, 1c, 2a, 2b, 2c, 2d, and 2e, by the first device and the second device, which is configured to connect and authenticate directly with the first device, for improving the efficiency of communication of the system.