Blinded Credential Authentication for Mobile User Computers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for user computers connected to mobile networks often compromise user privacy and require complex procedures, and they are vulnerable to malware that can misuse authentication information.
Innovation Solution
A method that uses cryptographic techniques to authenticate user computers by generating an authentication token comprising attribute credentials, location credentials, and proofs, ensuring the user computer's presence in the vicinity of the verifier server without revealing the device identifier, and using blinded credentials to enhance privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used to verify user computer presence, then authentication can be performed, but user privacy is compromised and device identifiers are revealed
Solution Approach 1:
The mobile network operator acts as an intermediary that issues location credentials without directly revealing the device identifier to the verifier server. The credential includes both the location data and a hashed device identifier, allowing the verifier to confirm presence while the actual identifier remains protected through the intermediary's cryptographic verification process.
Solution Approach 2:
Instead of transmitting the actual device identifier, the system creates a cryptographic copy (hashed version) of the identifier and embeds it in the location credential. This copy can be verified for equality between attributes without revealing the original identifier, thus maintaining privacy while enabling authentication.
2Ease of operation
If authentication information is stored on the user computer for access to services, then authentication can be performed, but the system becomes vulnerable to malware that can capture and misuse the information
Solution Approach 1:
The system extracts the device identifier from direct storage on the user computer and replaces it with a location credential issued by the mobile network operator. This credential contains a hashed identifier that cannot be easily captured or misused by malware, as it is cryptographically bound to the location data and verified through the operator's infrastructure.
Solution Approach 2:
The location credential acts as a disposable authentication token that is issued for a specific location and time period. Once used, the credential becomes invalid, preventing reuse by malware. The temporary nature of the credential ensures that even if captured, it cannot be used for prolonged authentication attacks.
3Measurement precision
If the device identifier is revealed during authentication to prove presence, then authentication can be verified, but the identifier can be tracked and linked across different transactions
Solution Approach 1:
The system changes the parameter used for identification from the raw device identifier to a hashed version of the identifier embedded in the location credential. This parameter transformation maintains the ability to verify location accuracy while preventing tracking, as the hashed value cannot be reversed to obtain the original identifier or linked across different transactions.
Data Source
AI summary
An approach for authenticating a user computer, connectable to a mobile network includes a computing device retrieving an attribute credential, the attribute credential certifying a set of user attributes, a device identifier for identifying the user computer to the mobile network, a location credential, the location credential certifying a device identifier and location data indicating a location of the user computer determined by the mobile network. The approach includes a computer producing an authentication token comprising the attribute credential, the location credential, the location data and a proof for proving that the device identifier in the attribute credential equals the device identifier in the location credential. The approach includes a computer producing a blinded attribute credential by randomized blinding of the attribute credential, wherein the authentication token includes the blinded attribute credential and the proof verifies possession by the user computer of the attribute credential in the blinded attribute credential.