Pseudonym 2-Factor Authentication Using Bioinformation and PUF IDs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods, particularly in the transition from 1-factor to 2-factor authentication, face challenges such as increased processing time, user inconvenience, and additional costs due to storage and processing requirements, while anonymous authentication technologies suffer from complexity and high costs.
Innovation Solution
A method utilizing a combination of bioinformation and a physically unclonable function (PUF) as an authentication key for generating an inborn ID, which simplifies multi-factor authentication and ensures anonymity by using unique device-specific information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-factor authentication is implemented to improve security, then authentication reliability is improved, but processing time and user inconvenience increase
Solution Approach 1:
The patent combines bioinformation-based authentication and device-based authentication into a unified 2-factor authentication process. The authentication execution device simultaneously verifies both the user's bioinformation and the terminal device's characteristics, merging two authentication factors into a single integrated process that maintains security while reducing sequential processing time
Solution Approach 2:
The patent performs preliminary authentication by verifying the terminal device's characteristics before processing the user's bioinformation. The authentication execution device first obtains and verifies device-based authentication information, then uses this preliminary verification to streamline the subsequent bioinformation authentication process, reducing overall processing time
2Reliability
If multi-factor authentication is implemented to improve security, then authentication reliability is improved, but device complexity and storage requirements increase
Solution Approach 1:
The authentication execution device is designed with multi-functionality, capable of handling both bioinformation-based authentication and device-based authentication through a single unified interface. This universal design allows the system to perform multiple authentication functions without requiring separate dedicated systems for each factor, thereby reducing overall system complexity
Solution Approach 2:
The patent introduces an authentication execution device as an intermediary between the user terminal and the authentication server. This intermediary handles the complex processes of obtaining, verifying, and coordinating both bioinformation and device characteristics, shielding the user and server from complexity while maintaining high authentication reliability
3Reliability
If real name authentication is used to ensure security, then authentication reliability is improved, but personal privacy protection deteriorates
Solution Approach 1:
The patent extracts and utilizes device-specific characteristics (such as hardware identifiers and system parameters) as an authentication factor, separating this device-based identification from personal information. This extraction allows authentication to proceed using non-personal device attributes, thereby protecting user privacy while maintaining authentication reliability
Solution Approach 2:
The patent uses copies or representations of device characteristics rather than original personal information for authentication purposes. By verifying device-based authentication information that replicates the terminal's unique identity without exposing personal data, the system maintains security while preventing personal information leakage
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed are a user terminal and authentication execution device for performing pseudonym 2-factor authentication, and an operating method therefor. The disclosed operating method of the authentication execution device includes receiving a first inborn ID, private key signature information, and a certificate issued by an authentication system from a user terminal, obtaining a second inborn ID and a public key of the user terminal included in the certificate by decrypting the certificate using a public key of the authentication system, performing primary authentication of a user of the user terminal by checking whether the first inborn ID and the second inborn ID match each other, and when the primary authentication is completed, performing secondary authentication of the user by verifying private key signature information with the public key.