Blockchain Authentication via Deterministic Password Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Implementing seamless user experience and retaining trust in Blockchain systems without storing private keys in back-end systems or relying on multiple user interfaces, while ensuring users have control over transactions written to the Blockchain and providing individual user-level identity.
Innovation Solution
A secret message, such as a one-time-password, is exchanged directly between the Blockchain and the user, confirmed by the Blockchain before writing to the ledger, using a deterministic algorithm and SMS communication to bypass intermediate systems, ensuring secure and authentic transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If private keys are stored in back-end systems, then system management is simplified, but user control and trust are compromised
Solution Approach 1:
The patent extracts the critical authentication function from the back-end system by implementing a deterministic algorithm that generates passwords locally on the user's device. This removes the need to store private keys in back-end systems while maintaining simplified management through automated password generation and validation.
Solution Approach 2:
The system enables self-service authentication by allowing users to generate and validate passwords locally using deterministic algorithms. The back-end system only receives and validates the generated password without handling private keys, thus maintaining both ease of operation and user control.
2Ease of operation
If multiple user interfaces are used, then user experience is enhanced, but system complexity and trust requirements increase
Solution Approach 1:
The patent implements a universal authentication mechanism that works across multiple user interfaces (web, mobile, desktop) through a common deterministic password generation algorithm. This single solution serves all interface types, enhancing user experience while avoiding the complexity of implementing separate authentication systems for each interface.
3Ease of operation
If intermediate front end applications are used, then user interface functionality is improved, but security is compromised due to potential compromise of these applications
Solution Approach 1:
The patent introduces a cryptographic intermediary layer where the deterministic password generation algorithm acts as a trusted mediator between the user interface and the blockchain. This intermediary ensures that even if the front-end application is compromised, the generated password remains secure and cannot be forged, thus maintaining security while preserving interface functionality.
4Device complexity
If traditional authentication methods are used, then implementation is simpler, but user-level identity control and transaction authenticity are insufficient
Solution Approach 1:
The patent transforms the authentication parameter from static private keys to dynamically generated passwords based on deterministic algorithms that incorporate user-specific inputs and blockchain transaction data. This parameter change enables fine-grained user-level identity control and transaction-specific authentication while maintaining implementation simplicity through automated generation and validation.
Data Source
AI summary
In some examples, Blockchain intelligent security implementation may include determining whether a Blockchain transaction has been initiated, generating, based on a determination that the Blockchain transaction has been initiated, a password, and storing the generated password. The stored password may be forwarded to a user associated with the Blockchain transaction. A further password may be received from the user associated with the Blockchain transaction, and validated, based on comparison of the stored password to the further password. Based on the validation of the further password, the Blockchain transaction may be processed.