Authentication Counter Resynchronization Without User Reset Prompts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing card-based transaction systems face security vulnerabilities due to unsynchronized counter values, leading to unauthorized access and fraudulent activity, with user prompts for counter resets susceptible to malicious attacks.
Innovation Solution
A counter resynchronization system using servers with processors to determine reset events, generate resync values, and transmit them to transmitting devices based on prioritization factors, automatically replacing counter values without user intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If user prompts are used for counter reset, then user awareness of security status is improved, but security is worsened due to susceptibility to malicious attacks
Solution Approach 1:
The patent removes the user prompt mechanism from the counter reset process. The server autonomously determines when counter resets are needed and transmits reset values without prompting the user, thereby eliminating the security vulnerability while maintaining necessary security monitoring through backend processes.
Solution Approach 2:
The server acts as an intermediary that manages counter synchronization between the transmitting device and authentication systems. It monitors counter values, determines reset events, and autonomously transmits reset values, replacing the need for user-initiated prompts while maintaining security control.
2Reliability
If automatic counter reset is implemented, then security is improved by eliminating user prompts, but device complexity is worsened due to server-side processing requirements
Solution Approach 1:
The patent combines counter monitoring, reset event determination, and reset value transmission functions into a unified server-side process. This consolidation manages complexity centrally while simplifying the transmitting device, as it only needs to receive and execute reset values without implementing complex monitoring logic locally.
Solution Approach 2:
The server autonomously performs counter synchronization without requiring user intervention or complex client-side logic. The transmitting device simply receives reset values when transmitted by the server, making the system self-managing at the server level and minimizing complexity at the device level.
3Reliability
If counter synchronization is continuously monitored, then reliability is improved, but loss of time is worsened due to verification overhead
Solution Approach 1:
The server implements periodic monitoring of counter values rather than continuous verification. It checks counter values at defined intervals and transmits reset values only when desynchronization is detected, reducing verification overhead while maintaining reliable synchronization through regular periodic checks.
Solution Approach 2:
The server rushes through the reset process by directly transmitting reset values once desynchronization is detected, minimizing the time the system remains in an unsynchronized state. The validation process efficiently confirms successful execution without prolonged verification delays.
Data Source
AI summary
Systems and methods for counter resynchronization can include one or more servers each including a memory and one or more processors. The one or more servers can be in data communication with a transmitting device. The one or more processors can be configured to determine one or more reset events. The one or more processors can be configured to generate a resync value. The one or more processors can be configured to transmit, via one or more scripts, the resync value to the transmitting device according to one or more prioritization factors and in response to the one or more reset events. The one or more processors can be configured to replace the counter value with the resync value in accordance with the one or more prioritization factors.