Application Layer Device Authentication via Digital Fingerprints
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication systems require additional factors that increase user inconvenience, as each increment in security complexity burdens users with more involvement.
Innovation Solution
Implementing device authentication at the application layer, using digital fingerprints of client devices as an additional authentication factor without requiring user interaction, by generating and comparing challenge response messages within the operating system protocols such as HTTP(s), FTP(s), POP, SMTP, and DNS, to authorize client devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If additional authentication factors are added to enhance security, then system security is improved, but user convenience deteriorates due to increased user involvement
Solution Approach 1:
The system performs device authentication automatically without requiring user action. The operating system's application layer handles the entire challenge-response process with the server, using the device's digital fingerprint self-service style, thereby adding security without increasing user burden
Solution Approach 2:
The operating system's application layer acts as an intermediary between the user space application and the server. It automatically manages the authentication challenge-response process, shielding the user from the complexity of multi-factor authentication while enhancing security
2Reliability
If device authentication is implemented at the application layer, then authentication security is improved without user interaction, but system complexity increases
Solution Approach 1:
The application layer authentication mechanism is designed to work universally across different user space applications (web browsers, email readers, etc.) without requiring application-specific modifications. This multi-functionality approach adds security while minimizing the impact on individual applications
3Reliability
If digital fingerprints are used instead of MAC addresses, then authentication reliability is improved due to difficulty of spoofing, but implementation complexity increases
Solution Approach 1:
The system changes the authentication parameter from simple MAC addresses to complex digital fingerprints that are difficult to spoof. The application layer automatically handles the generation and verification of these fingerprints, making the increased complexity transparent to the user and application developers
Data Source
AI summary
Device authentication is implemented at the application layer of a computer communication model to add a factor to user authentication without requiring any action by the user. User space applications, such as web browsers, e-mail readers, and such, can remain completely unaffected. Instead, the additional authentication factor is provided at the application layer, typically in an operating system, where protocols such as HTTP(s), FTP(s), POP, SMTP, SNMP and DNS are implemented. Authentication is performed by a challenge/response transaction and the client device's digital fingerprint is compared to a whitelist of digital fingerprints of authorized client devices.