Authentication System Using Anonymous Session Keys to Prevent Identity Exposure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods fail to adequately protect service users' identities from exposure, particularly in cases of hacking, negligence, or misconduct by service providers, and do not effectively manage personal information to prevent identity exposure.
Innovation Solution
A system and method for authentication that uses group discrimination data, including a group code and information to differentiate users, performs secure group authentication, encrypts user information, and limits service access to minimum required data, allowing e-mail authentication to separate subscription and service usage information, ensuring only one active account per email address.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If service providers collect personal information for authentication, then authentication functionality is enabled, but user identity exposure risk increases
Solution Approach 1:
The patent extracts and removes personally identifiable information (PII) from the authentication system. Instead of storing or processing user identities, the system uses anonymous session keys and temporary identifiers that cannot be traced back to specific users, thereby enabling authentication while eliminating identity exposure risk
Solution Approach 2:
The patent introduces an intermediary authentication server that acts as a mediator between users and service providers. This server handles all authentication operations using anonymous identifiers, preventing direct exposure of user identities to service providers while still enabling reliable authentication functionality
2Productivity
If service providers manage user information centrally, then service delivery is improved, but security against hacking and negligence deteriorates
Solution Approach 1:
The patent segments the authentication information into non-identifiable components. User identities are separated from authentication credentials, with the system storing only anonymous session keys and temporary identifiers that cannot be used to identify users even if compromised
Solution Approach 2:
The patent changes the parameters of stored information from permanent, identifiable data to temporary, anonymous identifiers. Session keys are frequently regenerated and have limited validity periods, reducing the impact of potential security breaches while maintaining efficient service delivery
3Ease of operation
If user information is stored for service authentication, then service access is enabled, but information security deteriorates
Solution Approach 1:
The patent employs disposable, short-lived authentication tokens instead of permanent user information storage. Each session uses temporary identifiers that are discarded after use, enabling easy service access while minimizing security risks associated with long-term information storage
Data Source
AI summary
Provided is a system and method for authentication. The method includes receiving a subscription request from a user terminal, the subscription request executed by an authentication server communicating with the user terminal and including group discrimination data including a group code and information for discriminating a group from another, if it is determined that the group code and the information included in the group discrimination data correspond to each other, performing a group authentication procedure on the user terminal and processing the group authentication procedure as being successful, issuing a member session key to the user terminal, and providing a service requested by the user terminal in response to the service request including the member session key from the user terminal. In one embodiment, it is possible to prevent information on service users from being divulged.