Authentication System Using Offline Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing online-based authentication methods require constant connectivity to a server, increasing the risk of illegality through token validity falsification and lack sufficient measures against unauthorized use, while offline authentication lacks sufficient security measures.
Innovation Solution
An authentication system that uses both online and offline tokens, with offline tokens issued after initial network connection, incorporating static and dynamic date and time information to ensure validity and prevent illegality, allowing application use even when disconnected from the server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If online-based authentication is used, then security against token falsification is improved, but convenience of offline application use deteriorates
Solution Approach 1:
The authentication system is segmented into online authentication mode (requiring server connection) and offline authentication mode (using stored credentials). The client device can operate in either mode depending on network availability, allowing users to maintain convenience during offline periods while ensuring security when online. This segmentation resolves the contradiction by providing context-appropriate authentication behavior.
Solution Approach 2:
Authentication credentials (tokens, certificates, or biometric data) are obtained through online authentication in advance and stored securely in the client device. This preliminary action enables the device to authenticate offline without real-time server connection, improving convenience while maintaining security through pre-verified credentials that are difficult to falsify.
2Ease of operation
If offline authentication is used, then convenience of application use is improved, but security against illegality deteriorates
Solution Approach 1:
Cryptographic elements (digital signatures, certificates, or secure tokens) serve as intermediaries between the user and the authentication system. These intermediaries enable offline authentication convenience while maintaining security, as they provide tamper-evident verification mechanisms that prevent illegality even without real-time server connection.
Solution Approach 2:
The authentication system changes parameters such as using biometric data (irreproducible physical characteristics) or time-limited tokens with cryptographic validation. These parameter changes enable offline authentication to maintain security against illegality while preserving user convenience through contactless or simplified authentication methods.
3Reliability
If constant server connection is required, then security control is improved, but system complexity and user burden increase
Solution Approach 1:
The authentication system dynamically adapts its operation mode based on network availability. When the server is accessible, the system performs online authentication for enhanced security control. When the server is unavailable, it automatically transitions to offline mode using stored credentials. This dynamic behavior maintains security control while reducing system complexity and user burden by eliminating the requirement for constant connection management.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An object is to achieve authentication that takes advantages of online authentication and offline authentication. A server 10 performs authentication, in response to an authentication request from a client PC and issues a token, when the user of an application is permitted. When the client PC in an offline state requires to use the application, the client PC requests the server 10 to change over to a standalone mode. The server then changes the issued token to an offline token that is valid for a predetermined time period. The offline token includes dynamic date and time information that is updated on every occasion of authentication, as well as static information indicating a validity period. Including the dynamic date and time information prevents illegal use of the token by causing the client PC's timepiece to go back in time after expiration of the validity period. This configuration enables an online authentication system to be used offline, while preventing illegal use.