Blockchain Hash One-Time Password Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing authentication methods using static passwords and one-time passwords (OTPs) are susceptible to eavesdropping and replay attacks due to predictable moving factors, such as counter values and time-based increments, which compromise security.

Innovation Solution

The use of a current blockchain hash value as a moving factor for generating secure tokens, combined with multi-factor authentication, provides enhanced security by utilizing an unpredictable sequence and storing authentication records in the blockchain to render tokens obsolete after use, creating a tamper-proof audit trail.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If predictable moving factors (counter values, time-based increments) are used in OTP generation, then the authentication system is easier to implement, but the security is compromised due to susceptibility to eavesdropping and replay attacks

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent changes the moving factor from predictable parameters (counter values, time-based increments) to unpredictable blockchain hash values. This parameter change resolves the contradiction by maintaining security while using a different computational approach that doesn't increase system complexity

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent introduces blockchain as an intermediary component to generate the moving factor for OTP authentication. The blockchain's unpredictable hash values serve as a mediator between the authentication system and the security requirements, eliminating the need for complex predictive algorithms while enhancing security

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If static passwords are used for authentication, then the system is simpler to operate, but the security is weakened due to replay attacks

Engineering Contradiction:
Improveauthentication operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent transforms the static password system into a dynamic authentication system by incorporating blockchain-based one-time passwords. Each authentication uses a unique, unpredictable hash value that changes with each blockchain block, making the system dynamic while maintaining ease of operation through automated token generation

Inventive Principle:
Principle #15Dynamics

3Reliability

If blockchain hash values are used as moving factors, then the unpredictability and security are improved, but the device complexity increases due to blockchain integration

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The blockchain network serves itself to generate the moving factors through its inherent consensus mechanism and block creation process. The authentication system doesn't need complex algorithms to generate unpredictable values - it simply retrieves hash values that the blockchain generates autonomously, reducing the complexity burden on the authentication system

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11316663B2One-time password with unpredictable moving factor
Publication Date: 2022.04.26 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11316663B2 patent drawing
  • US11316663B2 patent drawing
  • US11316663B2 patent drawing

AI summary

Techniques for authentication using a blockchain hash value as a moving factor. The techniques include retrieving, by an authenticating device and from a blockchain, a current hash value of the blockchain, where the authenticating device and an authenticator server share a secret key value and each have access to the blockchain. The techniques further including generating, by the authenticating device, a secure token based on the secret key value and the current hash value. The techniques further including transmitting the secure token to the authenticator server and receiving an indication of authentication from the authenticator server.