Authenticator Clock Drift Estimation via Delta Function Fitting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In secure communication systems, clock drift between authentication tokens and authenticators can lead to authentication failures, as different times generate different token codes, requiring frequent checks outside the current time band, which is inefficient and prone to errors.
Innovation Solution
The authenticator records delta values between its internal clock and the token generator's clock, fitting these values to a function to estimate and account for clock drift, allowing for accurate validation of passcodes within a specific time range, even when clocks are not synchronously communicatively coupled.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the token generator clock and authenticator clock are not synchronously communicatively coupled, then the system allows independent clock operation and reduces communication overhead, but clock drift occurs causing authentication failures
Solution Approach 1:
The system performs preliminary actions by recording delta values between token generator clock and authenticator clock at multiple time points, then fitting these values to a function to predict future clock offsets. This allows the authenticator to anticipate clock drift and adjust validation checks accordingly, maintaining authentication reliability without requiring synchronous clock coupling.
Solution Approach 2:
The system implements feedback by continuously monitoring and recording the difference (delta) between the token generator clock and authenticator clock, using these recorded differences to refine the prediction function. This feedback loop enables the system to adapt to clock drift patterns and improve authentication accuracy over time.
2Reliability
If frequent checks outside the current time band are performed to account for clock drift, then authentication reliability is maintained, but processing time and computational overhead increase
Solution Approach 1:
The system performs preliminary action by pre-calculating and recording delta values at multiple time points, then fitting these to a function that predicts clock offset at any given time. This allows the authenticator to make accurate validation checks within a defined time window without needing to perform extensive checks outside the current time band, significantly reducing processing time while maintaining reliability.
3Measurement precision
If clock synchronization is maintained between token generator and authenticator, then authentication accuracy is improved, but system complexity and communication requirements increase
Solution Approach 1:
The system extracts the essential information needed for time synchronization by recording only the delta values (time differences) between the token generator clock and authenticator clock at multiple time points. By fitting these extracted delta values to a function, the system achieves accurate time offset prediction without implementing complex synchronization mechanisms or continuous communication protocols.
Data Source
AI summary
A method, system, and program product for use in estimating clock offset in a security environment, the security environment comprising a token generator comprising a token generator clock and an Authenticator comprising an Authenticator clock, the method comprising recording a plurality of delta values; wherein each value of the plurality of delta values corresponds to a difference between the token generator clock and the Authenticator clock, wherein the token generator clock and the Authenticator clock are not communicatively coupled, and fitting the plurality of delta values to a function.