Authentication Server Alias-Based Login Without Passwords
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional online system login methods relying on usernames and passwords are vulnerable to hacking, especially when users reuse credentials across multiple systems, and the password reset process can further expose sensitive information.
Innovation Solution
An authentication system utilizing an authentication server that stores authentication account data, including aliases, login usernames, and bound authentication devices, allowing users to log in to online systems without inputting usernames and passwords by using an alias and confirming login requests through a bound authentication device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users use username and password for login, then authentication can be performed, but security risks increase due to credential reuse and hacking vulnerabilities
Solution Approach 1:
The patent extracts the password from the login process entirely. Instead of using traditional username-password authentication, the system uses device-based authentication where the authentication device itself serves as the credential. The private key never leaves the authentication device, and authentication is performed by signing a challenge with the private key, eliminating password-related security risks.
Solution Approach 2:
The patent introduces an authentication server as an intermediary between the user and the online system. The authentication server handles the cryptographic authentication process, verifying signatures without exposing private keys. This intermediary architecture separates the authentication logic from both the user device and the online system, enhancing security.
2Ease of operation
If users remember multiple username-password combinations for different systems, then account access is maintained, but users may forget credentials and require password reset processes that expose private information
Solution Approach 1:
The authentication device stores the private key and performs self-authentication by signing challenges. The device itself serves as the authentication credential, eliminating the need for users to remember passwords. The authentication process is automated through cryptographic operations performed by the authentication device without requiring user intervention beyond initiating the login.
3Measurement precision
If username includes unique personal information, then account identification is achieved, but user private information is distributed over the Internet increasing vulnerability
Solution Approach 1:
The patent extracts personal information from the authentication process. Instead of using usernames containing personal data, the system uses device-based authentication where the authentication device's identity (derived from its private key) serves as the unique identifier. This eliminates the need to transmit or store personal information in usernames.
Data Source
AI summary
A method for logging in an online system through an authentication server is provided. The authentication server records an authentication account of the authentication server, and an alias, a login username of the online system, and an authentication device that are associated with the authentication account. The method includes steps of: the online system sending a user-input name to the authentication server; the authentication server finding the authentication account; the authentication server, when determining that the user-input name conforms with the alias, sending a query message to the authentication device that is associated with the authentication account thus found; the authentication server, when receiving a confirmation message from the authentication device, providing the login username to the online system; and the online system, when determining that the login username has been registered on the online system, allowing an Internet device to log in to the online system.