Blockchain-Based OAuth Token Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The current OAuth protocol lacks a limit on the number of tokens that can be used by a client, making it vulnerable to malicious activities and allowing attackers to access affiliate services when user authentication information is hijacked, necessitating a new security algorithm to protect user authentication information from external attacks.
Innovation Solution
A method using blockchain technology and cryptography to authenticate users by registering access tokens in a blockchain network, verifying signature values, and generating access tokens, thereby preventing forgery and identity theft.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the OAuth protocol is used to allow clients to access resource servers with tokens, then authentication sharing among applications is enabled, but the system becomes vulnerable to malicious activities and token forgery due to lack of token usage limits
Solution Approach 1:
The patent applies preliminary action by pre-registering token usage limits and binding relationships in the blockchain network before authentication occurs. The resource owner configures which clients can access which resources and sets usage limits in advance, preventing unauthorized or excessive token usage without requiring complex real-time verification systems.
Solution Approach 2:
The patent introduces a blockchain network as an intermediary between the OAuth components. This decentralized ledger serves as a neutral mediator that independently verifies token validity, tracks usage limits, and enforces access control rules, eliminating the need for centralized trust and preventing token forgery through cryptographic verification.
2Speed
If traditional OAuth token verification is used, then authentication speed is maintained, but the system cannot prevent token hijacking and unauthorized access to affiliate services
Solution Approach 1:
The patent replaces the traditional mechanical OAuth verification system with a blockchain-based cryptographic verification system. Instead of relying on centralized server trust, the system uses distributed ledger technology and digital signatures to verify token authenticity, making token hijacking computationally infeasible while maintaining fast verification speeds through efficient cryptographic checks.
Solution Approach 2:
The patent changes the verification parameter from simple token presence to blockchain-verified token integrity. Each token includes cryptographic signatures and usage limits that are verified against the blockchain ledger, transforming the verification process from a trust-based mechanism to a mathematically proven security mechanism that prevents unauthorized access.
3Reliability
If blockchain technology is used to register and verify access tokens, then security and forgery prevention are enhanced, but system complexity increases
Solution Approach 1:
The patent segments the blockchain authentication system into distinct functional modules: token issuance, registration, verification, and limit enforcement. Each module handles a specific aspect of the authentication process, allowing the complex blockchain functionality to be implemented through simple, well-defined interfaces that integrate seamlessly with existing OAuth flows without overwhelming the system architecture.
Data Source
AI summary
A method for authentication based on a blockchain network is provided. The method includes steps of: an authentication-supporting server (a) if verification is requested by a certificate authority (CA) app, verifying a signature value and transmitting an access token to a user device, supporting the CA-affiliate app to transmit a login request to a CA-affiliate server, and registering the access token in the blockchain network, and transmitting a verification request to the blockchain network to transmit the access token to the authentication-supporting server, and register the access token in the blockchain network, and transmitting the access token to the user device, and transmit the login request to the CA-affiliate server, and (b) performing one of (i) verifying the access token, and (ii) transmitting the verification request to the blockchain network, and transmitting a verification-result to the CA-affiliate server, to allow the CA-affiliate app to log in to the CA-affiliate server.