Authentication NFTs and Bifurcated Passkeys for Verifiable MFA
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional user authentication methods, such as password or biometric data, are inadequate for ensuring verifiability, especially in situations requiring heightened security or multiple authorizations, and there is a need for a highly secure and defensible means of multifactor authentication.
Innovation Solution
The use of Non-Fungible Tokens (NFTs) and multiple passkeys, where authentication NFTs are generated using user credentials as a seed input, distributed to multiple users, and verified to decrypt and authenticate the user based on cryptographic algorithms, with requirements dynamically determined by event parameters.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional user credentials (password or biometric data) are used for authentication, then the authentication process is simple, but the verifiability and security are inadequate
Solution Approach 1:
The authentication credentials are segmented into multiple passkeys distributed to different users. Instead of relying on a single password or biometric, the system divides the authentication authority across multiple independent passkeys, each holding a portion of the authentication capability. This segmentation enhances verifiability while managing complexity through modular distribution.
Solution Approach 2:
An authentication NFT is introduced as an intermediary that mediates the verification process. The NFT contains cryptographic algorithms that verify the plurality of passkeys without requiring the system to directly manage complex multi-user authentication logic. This intermediary simplifies the overall system complexity while ensuring reliable verification.
2Reliability
If multiple passkeys are distributed to multiple users for multifactor authentication, then the security and verifiability are enhanced, but the system complexity increases
Solution Approach 1:
The authentication NFT serves multiple functions: it stores the cryptographic algorithms, manages the verification logic for multiple passkeys, and coordinates the authentication process across different users. This multi-functionality reduces the need for separate complex systems for each authentication task, thereby enhancing security while managing overall complexity.
Solution Approach 2:
The system enables self-service authentication where the authentication NFT autonomously verifies the plurality of passkeys using its embedded cryptographic algorithms. The NFT independently manages the verification process without requiring external intervention for each authentication event, enhancing security while reducing operational complexity.
3Adaptability or versatility
If passkey requirements are dynamically determined by event parameters, then the adaptability and security are improved, but the complexity of determining requirements increases
Solution Approach 1:
The authentication system dynamically adjusts passkey requirements based on event parameters such as transaction amount, user risk profile, and authentication context. The authentication NFT contains logic that automatically adapts the number and type of passkeys required, enhancing flexibility while managing complexity through parameter-based decision rules.
Data Source
AI summary
Multifactor user authentication leveraging secure tokenization, such as a Non-Fungible Token (NFT) and multiple passkeys (e.g., bifurcated passkey). One or more authentication NFTs are generated that use some form of a user's authentication credentials as the seed input for the NFT encryption/hash algorithm(s). In addition, passkeys are distributed to and/or made accessible to multiple passkey holders. In response to an event that requests multifactor authentication of the user, a plurality passkeys are requested, received and verified. Each of the passkeys being requested and received from, or at the directive of, one of the multiple passkey holders. In response to verifying the plurality of passkeys, at least one of the authentication NFTs is accessed and the cryptographic hash algorithm(s) is implemented to decrypt the authentication NFT(s) and identify the one or more user credentials. In response, the user is authenticated based at least on the user credentials that formed the basis for the authentication NFT(s).