A Breakthrough in IoT Authentication

Most security systems protect a secret — a key, a password, something static that gets used over and over. The attacker's job is to find that secret. Once they have it, they're in forever.

ZipIPS™ doesn't work that way.

Every authentication credential is tied to a single, unrepeatable moment in time. Both devices independently derive the credential from pre-shared tables that never cross the network. There is no static key to steal. No credential to replay. Authentication works both ways — the client verifies the host and the host verifies the client, each generating a fresh timestamp and independently confirming the response before access proceeds. And any device can challenge the commanding host before executing a new instruction — blocking man-in-the-middle attacks before they start. Failed attempts are immediately blocked, permanently logged, and available for review.

This is Zero Trust at the device level: never trust, always verify.

ZipIPS™ is protected by two issued U.S. patents — US10171465B2 and US10348729B2 — invented by Helene E. Schmidt of Creative Synergies LLC. It is a licensable architecture, not a product. Licensees write their own implementation code, configured for their specific environment, at millisecond, microsecond, or nanosecond precision depending on their hardware capabilities.

Independent analyses by Claude (Anthropic) and Grok 4 (xAI) — conducted separately and reaching the same conclusions — confirm that ZipIPS™ delivers greater security than current NIST post-quantum and lightweight cryptography standards, in a credential one-eighth the size of CRYSTALS-Kyber-512.