Authentication Server Password Grouping and ID-Based Scrambled Input
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication systems are vulnerable to illegal password acquisition by third parties due to password leakage or snooping during the input process, lacking effective measures to prevent unauthorized access.
Innovation Solution
An authentication server apparatus that divides characters of an authentication password into groups, associates them with identifiers, generates an authentication code based on these groups, and transmits a pattern-based authentication screen to the terminal device, allowing users to input the code in a scrambled format, which is then encrypted and stored securely, reducing the risk of password exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the authentication password is stored in the authentication server, then the authentication function can be provided, but the password may be illegally acquired by a third party due to leakage
Solution Approach 1:
The authentication password is divided into multiple character groups, where each group contains one or more characters. Instead of storing the complete password, the server stores only the group ID string that identifies the segmentation pattern. This segmentation prevents the server from holding the actual password characters, thereby reducing password leakage risk while maintaining authentication functionality.
Solution Approach 2:
The invention extracts and removes the sensitive password characters from the stored data. Only the group ID string (which does not reveal actual password characters) is stored in the authentication server. The original password characters are discarded after authentication, eliminating the stored password vulnerability while preserving the ability to verify authentication.
2Ease of operation
If the password is displayed on the authentication screen, then the user can input the password, but the password may be snooped by a third party during input
Solution Approach 1:
The authentication screen displays group ID strings instead of actual password characters. Each position on the screen shows a group ID that corresponds to a specific character group in the password, rather than displaying the actual character. This local substitution maintains the input interface functionality while preventing third parties from observing the actual password characters during entry.
3Object-affected harmful factors
If the authentication password is encrypted and stored, then the password security is improved, but the system complexity increases
Solution Approach 1:
The password is segmented into character groups and converted to group ID strings before storage. This preliminary transformation creates a simplified representation that inherently provides security without requiring complex encryption algorithms. The group ID string serves as a lightweight, secure identifier that can be stored and processed more efficiently than encrypted password data.
Data Source
AI summary
There is provided an authentication server apparatus connected with a terminal device through a network including a storage device configured to store pattern descriptions, wherein characters used for an authentication password for authenticating a user are divided into groups, and the divided characters are associated with IDs of the respective groups in one of the pattern descriptions, a password processing unit configured to generate an authentication code composed of a string of the IDs of the groups and to store it, wherein the authentication code is generated on a pattern description—by —pattern description basis, a screen transmitting unit configured to transmit data of an authentication screen including one of the pattern descriptions to the terminal device, and an authentication unit configured to authenticate the user based on the string of the IDs corresponding to the authentication password and the authentication code corresponding to the pattern description.