Authentication Data Validation Using Assertion Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods require complex hardware and software installations, are vulnerable to password hacking, and are unreliable for institutions lacking resources, posing security risks in online transactions.
Innovation Solution
A method involving a server computer that receives, verifies, and stores authentication data packets, and transmits verification data to an authorizing entity, using a public-private key pair for enhanced security through assertion signatures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password authentication is used, then ease of operation is improved, but security reliability deteriorates due to vulnerability to hacking and social engineering
Solution Approach 1:
The patent introduces an intermediary authentication system using public key infrastructure (PKI) and digital certificates. Instead of direct password verification, the system uses cryptographic intermediaries (digital signatures, certificates) to mediate between the user and the authentication server, eliminating the need for passwords while maintaining ease of use through automated verification processes
2Reliability
If complex authentication hardware and software is installed, then security reliability is improved, but device complexity increases and adaptability deteriorates for institutions lacking resources
Solution Approach 1:
The patent employs cryptographic copying mechanisms where digital certificates and public keys are copied and distributed throughout the system. Instead of requiring complex hardware, the system uses copied cryptographic data (certificates stored in databases, public keys exchanged between systems) to achieve authentication, significantly reducing hardware requirements while maintaining security
Solution Approach 2:
The patent replaces mechanical/authentication hardware systems with software-based cryptographic mechanisms. Physical security hardware is substituted with digital cryptographic operations (hashing, signing, verification) that can be performed on standard computers, eliminating the need for specialized authentication hardware and reducing overall system complexity
3Ease of operation
If traditional authentication processes are used, then ease of operation is maintained, but loss of information increases due to reliance on passwords that can be obtained by illegitimate means
Solution Approach 1:
The patent converts the potential harm of information exposure into a benefit by using asymmetric cryptography. The private key remains secret and never transmitted, while the public key is freely distributed. This means authentication information cannot be stolen or leaked in the traditional sense, as the critical private information never leaves its protected environment, transforming the vulnerability of password transmission into a security advantage
Data Source
AI summary
A server computer may receive an authentication data packet including authentication data from a relying party computer in communication with an authenticator associated with a user device. The server computer may verify the authentication data in the authentication data packet. The server computer may store the authentication data packet in a database. The server computer may transmit to an authorizing entity computer, a data packet including data relating to the verification of the authentication data.