Authentication Device Password Similarity Inhibition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face difficulty in managing multiple passwords for different devices or systems, leading to increased inconvenience and potential safety risks due to the likelihood of incorrect login permissions when trying to access specific devices or systems.
Innovation Solution
An authentication device that stores user information with multiple fixed passwords, allowing login by matching entered passwords with stored ones, and inhibits authentication based on similar passwords to prevent unauthorized access by setting a predetermined condition on similarity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple one-time passwords are registered in a database on a server, then the user is more likely to be permitted to log in to the server, but the user needs to register many one-time passwords one after another and remember them, which makes it difficult to manage the passwords
Solution Approach 1:
The patent segments the authentication system into two parts: the server stores multiple fixed passwords in a database, while the client device stores biometric information locally. This segmentation allows the server to provide multiple login options without requiring the user to manage multiple one-time passwords, as the biometric authentication handles the security aspect locally.
Solution Approach 2:
The biometric authentication system performs self-service by automatically verifying the user's identity using stored biometric information on the client device. This eliminates the need for users to manually register and remember multiple passwords, as the biometric system handles authentication automatically and seamlessly.
2Reliability
If one-time passwords are used and thrown away after use, then safety is maintained, but the user needs to register many one-time passwords one after another, which increases complexity
Solution Approach 1:
The patent uses biometric information as a disposable authentication mechanism. Each successful biometric authentication uses the stored biometric data once, similar to how one-time passwords work, but without the complexity of registering multiple passwords. The biometric data remains secure on the client device and is used only for authentication purposes.
3Ease of operation
If the system allows multiple fixed passwords for login, then user convenience is improved, but the risk of unauthorized access increases if similar passwords are guessed
Solution Approach 1:
The system performs preliminary action by storing multiple fixed passwords in advance in the server's database before any authentication attempt. When a user logs in, the server checks the entered password against these pre-stored passwords. This allows the system to accommodate multiple login options without requiring real-time password generation or management, thereby maintaining convenience while controlling security risks through the inhibition mechanism.
Data Source
AI summary
In an authentication device, a controller executes login when a user name and a password are entered through an operation device and the entered password is identical to one of a plurality of fixed passwords previously stored in association with the entered user name on an HDD. When the entered password is identical to none of the plurality of fixed passwords and any one of the plurality of fixed passwords satisfies a predetermined condition on similarity to the entered password, the controller inhibits an authentication based on the fixed password satisfying the predetermined condition from being made for a predetermined period.