Authentication Code Management via Device State Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices, such as bank cards and authentication tokens, that deliver dynamic authentication codes face issues with failure detection, as manufacturers and issuers lack information on device state, leading to unnecessary replacements and security risks due to unsynchronized or unavailable codes.
Innovation Solution
A method that involves obtaining a current authentication code, detecting a predefined state of the device, applying a predefined function to the code to generate a modified authentication code, and issuing this code to the user, allowing servers to detect device state and enhance security and management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dynamic authentication codes are implemented in electronic devices, then transaction security is improved, but device complexity increases due to additional components like microcircuits, screens, batteries, and clocks
Solution Approach 1:
The patent extracts the authentication code generation and modification functionality from complex hardware components and implements it through software algorithms. The device uses a microcontroller with cryptographic capabilities to generate authentication codes based on time and counter values, eliminating the need for complex hardware security modules while maintaining security.
Solution Approach 2:
The patent implements a universal authentication code generation mechanism that can be applied across different electronic devices and communication protocols. The same cryptographic algorithm and code modification approach work for various device types (tokens, cards, mobile devices) and authentication scenarios, reducing the need for device-specific complex hardware.
2Stability of the object's composition
If multiple components (microcircuit, screen, battery, clock) are added to deliver dynamic codes, then code synchronization is improved, but reliability decreases due to potential component failures
Solution Approach 1:
The patent implements compensation mechanisms that anticipate and correct for clock drift and synchronization issues before they cause authentication failures. The system uses time synchronization protocols and counter value adjustments to preemptively maintain code synchronization, cushioning against the effects of component imperfections.
Solution Approach 2:
The patent employs feedback mechanisms where the device and server continuously exchange time and authentication information to maintain synchronization. The server validates authentication codes and provides feedback on synchronization status, allowing the device to adjust its timing and counter values to maintain accurate code generation despite component variations.
3Reliability
If authentication codes are regularly updated, then security against fraud is improved, but loss of time occurs during code generation and synchronization
Solution Approach 1:
The patent pre-generates authentication codes and prepares cryptographic materials in advance. The device maintains a window of valid authentication codes that can be used during a time period, eliminating the need for real-time code generation during authentication transactions and reducing transaction time.
Solution Approach 2:
The patent implements periodic authentication code updates at predetermined time intervals or after a certain number of uses. This periodic regeneration balances security requirements with performance, updating codes frequently enough to prevent fraud but not so frequently as to cause excessive synchronization overhead and transaction delays.
4Device complexity
If manufacturers and issuers have no information on device failures, then device simplicity is maintained, but productivity decreases due to unnecessary card replacements
Solution Approach 1:
The patent implements feedback mechanisms where authentication devices report their operational status, error conditions, and usage patterns to issuing authorities. This allows manufacturers and banks to monitor device health remotely, identify failing devices before complete failure, and proactively replace only the necessary devices rather than performing blanket replacements.
Solution Approach 2:
The patent enables authentication devices to self-diagnose their operational status and automatically report anomalies to the issuing authority. The device monitors its own components (battery status, clock accuracy, cryptographic module health) and triggers replacement requests only when actual failures or anomalies are detected, eliminating unnecessary replacements and improving fleet management efficiency.
Data Source
Figure 1~2
Figure 3~4B
Figure 5A~6D
AI summary
A method for managing an electronic device (500) associated with a user and implemented by the electronic device, the method comprising: a- obtaining a current authentication code, b- detecting a predefined state of the electronic device, c- applying a predefined function associated with the predefined state to the current authentication code to obtain a modified authentication code, and d- issuing the modified authentication code to the user. The invention also relates to the corresponding device (500), a method implemented by a server, and the corresponding server.