Authentication System With Multi-Mode One-Time Passwords
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems are vulnerable to unauthorized access due to intercepted passwords, even when encrypted, and lack sufficient variability in token values, making them susceptible to guessing or replay attacks.
Innovation Solution
An authentication system that generates an authentication parameter as a function of time-dependent information using a predetermined transformation with an inverse transformation, supporting multiple authentication modes with different bit-lengths and employing multiple rounds of transformation to increase variability and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If one-time passwords are transmitted over communications channels, then authentication security is improved, but the system becomes vulnerable to interception and replay attacks
Solution Approach 1:
The patent implements dynamic password generation where the authentication parameter changes based on time-dependent input values. Each authentication request generates a unique parameter that is valid only for a specific time interval, making intercepted parameters useless for replay attacks. The system dynamically updates the time-dependent input and regenerates authentication parameters continuously.
Solution Approach 2:
The patent performs preliminary transformation of the time-dependent input through multiple rounds of cryptographic transformations before transmission. This pre-processing ensures that even if the transmitted parameter is intercepted, the original time-dependent input cannot be easily derived, providing forward security before the authentication event occurs.
2Reliability
If multiple rounds of transformation are performed on time-dependent input, then variability and security are increased, but computational complexity increases
Solution Approach 1:
The patent applies multiple rounds of transformation with varying parameters including different time-dependent input values, transformation functions, and round counts. Each round uses changed parameters to transform the data further, achieving high security through parameter variation rather than structural complexity. The system balances security strength with computational efficiency by adjusting the number of rounds and parameter complexity.
3Adaptability or versatility
If the bit-length of time-dependent input varies for different authentication modes, then adaptability is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal transformation framework that can handle multiple authentication modes with different bit-length requirements through a single configurable system. The same transformation infrastructure supports varying input lengths by adjusting parameters rather than requiring separate systems for each mode, achieving multi-functionality without proportional complexity increase.
Data Source
AI summary
Authentication processing is provided which includes generating an authentication parameter as a function of a time-dependent input using a predetermined transformation having an inverse transformation. Multiple authentication modes are supported, with a bit-length of the time-dependent input of one authentication mode being different from a bit-length of the time-dependent input of another authentication mode. Generating the authentication parameter is dependent, in part, on whether the time-dependent input is of the one authentication mode or the other authentication mode, and includes performing multiple rounds of transformation of the time-dependent input. A time-dependent password including a character string is generated from the authentication parameter using another predetermined transformation having another inverse transformation. The time-dependent password is forwarded within the authentication system for authentication by an authenticator.