Authentication Cryptogram Data Element Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication protocols, such as those used in Integrated Circuit Cards (ICC), face challenges in securely conveying and verifying data elements within challenge-response exchanges, particularly in distinguishing between authentic and fraudulent responses.
Innovation Solution
The method involves determining a challenge, computing cryptograms using party-specific keys, and performing bit-wise operations to recover data elements from non-matching responses, allowing for secure data element recovery and execution of security actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a challenge-response exchange is used for authentication, then security is improved, but the ability to convey additional data elements securely is limited
Solution Approach 1:
The patent combines the authentication response cryptogram with additional data elements (such as authorization codes, transaction data, or security parameters) into a single composite response message. This merging allows the challenge-response protocol to simultaneously verify authentication and convey multiple data elements securely in one exchange, resolving the contradiction between security reliability and adaptability.
Solution Approach 2:
The response message structure is designed to serve multiple functions: it acts as both an authentication verification token and a carrier for various data elements including authorization decisions, transaction identifiers, and security parameters. This multi-functionality enables the same authentication mechanism to handle diverse communication needs without compromising security.
2Productivity
If data elements are embedded in cryptograms, then communication efficiency is improved, but the complexity of verifying and recovering data increases
Solution Approach 1:
The response cryptogram is segmented into distinct portions, each carrying specific data elements. The receiving system can selectively process or ignore certain segments based on its needs, reducing the complexity of data recovery by focusing only on relevant portions rather than processing the entire cryptogram structure.
Solution Approach 2:
The patent introduces an intermediary processing layer that handles the decryption and extraction of data elements from the cryptogram. This intermediary component abstracts the complexity of data recovery, presenting a simplified interface to the main authentication system while managing the intricate cryptographic operations and data extraction logic.
3Loss of time
If multiple data elements are conveyed in a single response, then the number of exchanges is reduced, but the risk of information loss or corruption increases
Solution Approach 1:
The patent applies preliminary error detection and correction coding to the data elements before they are embedded in the response cryptogram. This preliminary protection ensures that even if the composite message experiences corruption during transmission, the receiving system can detect and correct errors, maintaining data integrity without requiring additional verification exchanges.
Data Source
AI summary
An authentication method is performed between a first party and a second party. The method includes: i) determining a challenge; ii) sending the challenge to the second party; receiving a response from the second party including a second cryptogram; computing a first cryptogram using the challenge and the key of the first party; determining if the first cryptogram matches the second cryptogram received from the second party. If the first cryptogram does not match the second cryptogram, the method further includes performing a computation using the first cryptogram and the second cryptogram; and comparing a result of the computation with a stored set of results to recover a first data element carried by the second cryptogram.