Authentication Chain of Strings via One-Way Function Iteration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods in computing systems, such as those based on passwords, hashed passwords, and private/public keys, are vulnerable to traffic sniffing and data dump attacks, and computationally complex operations lead to performance degradation and denial-of-service risks in distributed architectures.
Innovation Solution
An authentication method using a chain of strings generated by iteratively applying a one-way function to a secret string, where the server stores a verification string and the client generates authentication strings with fewer iterations, allowing verification without exposing the secret string, thus reducing security risks and computational load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (passwords, hashed passwords, private/public keys) are used, then authentication security is maintained, but the system becomes vulnerable to traffic sniffing and data dump attacks
Solution Approach 1:
The patent introduces an intermediary verification string stored on the server that mediates between the client's authentication string and the secret string. The server compares the verification string (derived from the secret string) with the authentication string without ever storing or exposing the secret string itself, thus preventing traffic sniffing and data dump attacks while maintaining authentication security
Solution Approach 2:
The patent extracts the secret string from the server's storage by using a one-way function to generate a verification string from the secret string. The server stores only the verification string, not the secret string itself. This extraction eliminates the harmful factor of storing sensitive credentials on the server while maintaining the ability to authenticate users
2Reliability
If computationally complex authentication operations are used, then authentication security is improved, but performance degradation and denial-of-service risks occur
Solution Approach 1:
The patent segments the authentication computation by using a one-way function that can be efficiently computed. Instead of using computationally complex operations like cryptographic key pairs or complex hashing, the system uses a simple one-way function that generates a verification string quickly, allowing fast authentication while maintaining security
Solution Approach 2:
The patent changes the computational parameter from complex operations to simple one-way function applications. The verification process involves computing a one-way function on the authentication string and comparing it with the stored verification string, which is computationally lightweight and resistant to denial-of-service attacks
3Ease of operation
If the secret string is stored on the server for authentication, then authentication can be performed, but security risks increase due to potential data breaches
Solution Approach 1:
The verification string acts as an intermediary that allows the server to perform authentication without storing the secret string. The server stores only the verification string (derived from the secret string using a one-way function) and compares it with the authentication string, eliminating the need to store sensitive credentials while maintaining authentication capability
Solution Approach 2:
The patent extracts the secret string from server storage by using a one-way function to create a verification string from it. The server stores only the verification string, not the secret string itself. This extraction eliminates the harmful factor of storing sensitive credentials on the server while maintaining the ability to authenticate users
Data Source
AI summary
A solution is proposed for performing authentications. A corresponding method comprises storing a verification string corresponding to applying a one-way function iteratively starting from a secret string. An authentication request is received in association with an authentication string (or more) being generated by applying the one-way function iteratively starting from the secret string for a lower number of times. A result of the authentication request is determined by comparing the verification string with a comparison string being generated by applying the one-way function to the authentication string (or a few times iteratively). Corresponding computer programs and a computer program products for performing the method are also proposed. Moreover, corresponding systems for implementing the method are proposed.