Authentication System Using Segmented Symbol Key Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems face challenges in providing a cost-effective and secure method that can handle various functions, including anonymous transactions, user identification, and long-term financial instruments, while being accessible to a wide audience, including the unbanked and those with limited literacy or using non-Latin scripts, and addressing issues like fraud and transliteration errors.
Innovation Solution
A method using a remote transaction information device and a central authentication system that generates a personal authenticated transaction ticket with a symbol key and minimal personal information, such as surname, initial, and birth date, which is encrypted and transmitted for verification, allowing for two-stage authentication and secure registration without requiring extensive identity documentation at the point of sale.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If personal details and supporting documentation are collected for authentication, then security and user identification are improved, but the authentication process becomes time-consuming and complex
Solution Approach 1:
The authentication process is segmented into two distinct stages: a fast initial authentication stage using minimal data (name, date of birth, transaction amount) and a slower registration stage for collecting comprehensive personal details and documentation. This segmentation allows the system to provide rapid authentication when needed while still gathering necessary security information separately, resolving the contradiction between security and speed.
Solution Approach 2:
The system performs preliminary authentication using readily available minimal personal information before requiring comprehensive documentation. By establishing initial authentication credentials in advance (at the point of transaction), the system enables fast subsequent authentications without repeatedly requiring full documentation, thus reducing authentication time while maintaining security.
2Measurement precision
If comprehensive personal information is collected for registration, then user identification accuracy is improved, but fraud risk increases due to document forgery and identity theft
Solution Approach 1:
The system introduces an intermediary authentication mechanism (the authentication code generated from minimal personal information) that mediates between the user and the comprehensive personal information stored in the database. This intermediary allows verification of identity without directly exposing or relying solely on vulnerable documentation, reducing fraud risk while maintaining verification accuracy.
Solution Approach 2:
The system replaces reliance on physical documentation (passports, utility bills) with a digital authentication code generated through cryptographic processes. This substitution eliminates the vulnerability to forged documents while maintaining accurate identity verification, as the authentication code is derived from verified personal information stored securely in the database.
3Reliability
If traditional authentication systems are used, then security for banked users is maintained, but accessibility for unbanked and illiterate populations is limited
Solution Approach 1:
The system enables users to authenticate themselves using minimal personal information that they already know (name, date of birth) without requiring interaction with bank officials or knowledge of complex procedures. The authentication code is generated automatically by the system based on this minimal information, allowing unbanked and illiterate users to access financial services independently while maintaining security through the centralized verification process.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of generating a personal authenticated transaction ticket with a registered-user redemption functionality is described. The method is inplemented using a remote transaction information device and a central authentication server. The method comprises receiving data at the remote transaction information device from a user, the data including i. a symbol key comprising at least one symbol selected from a plurality of symbols, and ii. personal information identifying the user, the personal information including at least the user name, digitising and encrypting the symbol key and the personal information, transmitting the encrypted data to the central server, receiving a unique transaction number associated with the symbol key and personal information, and providing the unique transaction number to the user as part of the transaction ticket, the unique transaction number confirming the registration of the user and the authentication of the transaction ticket with the central server.