Authentication Apparatus Recursive Password Generation Memory Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems face challenges in efficiently managing a large number of passwords and seeds, leading to increased memory storage requirements, especially when the number of seeds increases, which can compromise system security and efficiency.
Innovation Solution
The proposed authentication system employs an authentication apparatus and authentication-target apparatus that utilize a recursive function or recurrence relation to generate passwords for comparison, allowing for secure authentication with reduced memory storage needs by using repetitive computations to match stored passwords, thereby minimizing the number of passwords and seeds required.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the number of passwords and authentication seeds is increased to improve authentication security, then authentication reliability is improved, but memory storage capacity increases
Solution Approach 1:
The authentication system segments authentication data into two categories: password data (passwords and salt values) stored in the authentication apparatus, and seed data stored in the authentication-target apparatus. This segmentation allows each apparatus to store only essential data, reducing overall memory requirements while maintaining security through distributed storage.
Solution Approach 2:
The system performs preliminary computation by generating multiple password variants through repetitive computation using different seed combinations before authentication. The authentication apparatus pre-stores password data derived from these computations, allowing efficient verification without storing all possible seed combinations, thus reducing memory capacity requirements.
2Reliability
If password authentication is used to limit access to data, then security is improved, but the number of passwords increases requiring larger memory capacity
Solution Approach 1:
The system changes the parameter of password verification by using repetitive computation with varying computation counts (first number vs. second number) rather than comparing against multiple stored passwords. This allows the system to verify authentication with a single stored password entry while maintaining security through computational verification.
Solution Approach 2:
The authentication system uses a universal verification mechanism where the same stored password data can be verified through multiple computation iterations. This multi-functional approach allows a single password entry to serve multiple authentication purposes, eliminating the need to store separate passwords for different access levels.
Data Source
AI summary
An authentication apparatus transmits code and challenge to a target, receives a response, and authenticates the target based on the response. The target receives the code and the challenge, generates a password for comparison by executing n times of repetitive computation by a recurrence relation or a recursive function using the code as an initial input, executes password authentication using a pre-stored password and the password for comparison. If the password authentication has succeeded, the target reads out an authentication seed corresponding to the number n that is the number of times of execution of the repetitive computation with which the password for comparison that matches a password has been obtained, and generates the response using the read-out authentication seed and the challenge received from the authentication apparatus, and transmits the response.