Authentication Method Using Segmented Arbitrary Values
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password authentication methods are vulnerable to theft of current authentication information, allowing malicious parties to impersonate legitimate users and compromise private information, especially in insecure environments.
Innovation Solution
The method involves creating and using authentication information based on arbitrary values, which are masked and transmitted securely, making it difficult for unauthorized parties to recreate authentication data even if stored information is stolen.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If current authentication information is stored in the server for password authentication, then authentication can be performed efficiently, but the authentication information becomes vulnerable to theft and impersonation attacks
Solution Approach 1:
The authentication information is segmented into current authentication information (An) stored in the server and arbitrary values (Nn) stored in the user terminal. This segmentation ensures that the server stores only partial information that is useless for impersonation attacks, while the user terminal holds the critical arbitrary values needed to generate valid authentication data.
Solution Approach 2:
Arbitrary values (Nn) are preliminarily stored in the user terminal before authentication occurs. These pre-stored values are combined with the current authentication information during the authentication process to generate transmission data, ensuring that even if the server's stored information is stolen, it cannot be used for impersonation without the corresponding arbitrary values.
2Reliability
If authentication information is transmitted in masked form using current authentication information, then security is improved, but the system complexity increases
Solution Approach 1:
Transmission data serves as an intermediary that masks the arbitrary values using current authentication information. This intermediary layer protects the sensitive arbitrary values during transmission while maintaining a relatively simple protocol structure that builds upon conventional authentication frameworks.
3Reliability
If the server stores only current authentication information without arbitrary values, then the server security is improved, but the ability to perform authentication is compromised
Solution Approach 1:
The authentication capability is segmented between the server's current authentication information and the user terminal's arbitrary values. Both components are necessary to perform authentication, ensuring that the server remains secure while maintaining full authentication functionality through the collaborative verification process.
Solution Approach 2:
The authentication process uses feedback mechanisms where the server verifies transmission data against its stored current authentication information. This feedback loop ensures that authentication functionality is maintained while the server stores only the minimal information needed for verification, enhancing security.
Data Source
AI summary
In a server for authenticating a user, an acquiring unit acquires current authentication information that is created using an arbitrary value and that is used for a current authentication process, from user. A receiving unit receives first transmission information in which next authentication information to be used for a next authentication process is hidden using the current authentication information, and second transmission information in which the arbitrary value is hidden using the next authentication information, from the user. A calculating unit calculates the next authentication information based on the first transmission information and the current authentication information, and the arbitrary value based on calculated next authentication information and the second transmission information. A determining unit determines whether to authenticate the user based on the arbitrary value and the current authentication information.