Anonymous Authentication via One-Way Function Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing purchase mechanisms fail to ensure anonymous transactions, as they often reveal the identity of the user to the service provider, and do not effectively prevent abuse or piracy of tokens.
Innovation Solution
A method and system utilizing one-way functions, such as modular square or hash functions, to create anonymous authentication, where a user device sends a result of a one-way function on a random number to a service provider, allowing for anonymous communication and service requests without revealing the user's identity, and ensuring tokens are used only once.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional purchase mechanisms are used, then the service provider can verify user identity and ensure transaction security, but the user's identity is revealed to the service provider, compromising anonymity
Solution Approach 1:
The patent extracts the authentication verification function from the user's actual identity. Instead of verifying the user's real identity, the system verifies a cryptographic proof (signature) that proves possession of a valid token without revealing who the user is. This separates the verification function from identity revelation, allowing security without compromising anonymity.
Solution Approach 2:
The patent introduces cryptographic tokens and signatures as intermediaries between the user and service provider. The token acts as a mediator that carries authentication information without exposing user identity. The digital signature serves as an intermediary proof that validates the token without revealing the user's personal information.
2Ease of operation
If tokens are made reusable for convenience, then ease of operation improves, but the system becomes vulnerable to abuse and piracy
Solution Approach 1:
The patent makes token validity dynamic through timestamp verification and sequence number checking. Tokens are valid only for specific time windows and sequence ranges, automatically expiring or becoming invalid after use. This dynamic validity control allows convenient reuse within authorized parameters while preventing abuse through automatic expiration and single-use enforcement.
Solution Approach 2:
The service provider provides feedback by verifying each token against a database of issued tokens, checking timestamps and sequence numbers. This feedback mechanism confirms whether a token is valid, already used, or expired, preventing double-spending and abuse while allowing legitimate reuse within authorized parameters.
3Loss of information
If anonymous communication channels are established, then user privacy is protected, but verifying user authenticity becomes more difficult
Solution Approach 1:
The patent replaces mechanical identity verification (checking user credentials, IDs, or personal information) with cryptographic verification. Instead of mechanically verifying who the user is, the system uses mathematical proofs (digital signatures) to verify that the user possesses a valid token. This substitution maintains anonymity while enabling reliable authentication through cryptographic rather than mechanical means.
Data Source
AI summary
A method and system for anonymous purchase by a first user device, is described, the method and system including sending R from the first user device to a second user device, where R is a result of a one-way function performed on a random number r selected by the first user device, the second user device being operative to send R to a service provider, which stores R with a data string T and the service provider returns a digitally signed R and T to the second user device, thereby providing the a data string T to the second user device, receiving R and T at the first user device from the second device, thereby ensuring that the identity of the first user device remains unknown to the service provider, opening a communication channel between the first user device and the service provider, sending the service provider r and T from the first user device via the communication channel along with a request for the service provider to provide a service, and receiving the requested service from the service provider. Related methods, systems and apparatus are also described.