Blockchain-Based Public Key Encryption for Secure Authentication Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional mobile device authentication services are vulnerable to unauthorized access as authentication numbers can be intercepted during transmission, posing risks to financial services.
Innovation Solution
A method and system for secure transmission of user-authenticating information using a blockchain network, where authentication numbers are encrypted with a user's public key and transmitted to a mobile device, which can only be decrypted using the user's private key, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication number is transmitted through mobile communication network, then user authentication can be performed, but unauthorized user can intercept the authentication number
Solution Approach 1:
The patent introduces encryption technology as an intermediary between the authentication number and the transmission channel. The authentication number is encrypted before transmission, creating a secure intermediary layer that prevents direct interception. The encrypted form cannot be understood by unauthorized users during transmission, while the legitimate user can decrypt it using their private key.
Solution Approach 2:
The patent changes the parameter of the authentication number from plaintext to ciphertext form during transmission. By applying encryption transformation, the authentication number's state changes from readable to unreadable, preventing interception while maintaining its functional value for authentication after decryption by the authorized user.
2Reliability
If authentication number is encrypted with public key, then unauthorized users cannot decrypt it, but system complexity increases
Solution Approach 1:
The patent implements a self-service authentication system where users generate their own key pairs (public and private keys) and manage their own encryption/decryption processes. The mobile device automatically performs encryption with the public key and decryption with the private key without requiring complex centralized key management infrastructure, reducing overall system complexity.
Solution Approach 2:
The patent performs key pair generation and registration in advance before the actual authentication process. Users generate their public-private key pairs beforehand, and the public keys are registered in advance in a public directory or blockchain. This preliminary setup eliminates the need for complex real-time key distribution and management during authentication operations.
3Reliability
If public key is stored in blockchain network, then key registration and retrieval becomes secure, but network dependency increases
Solution Approach 1:
The patent moves key management from a traditional centralized database dimension to a distributed blockchain dimension. By storing public keys in the blockchain network, the system achieves decentralized, tamper-proof key registration and retrieval. This adds a new dimensional approach to key management that enhances security through cryptographic chaining and distributed consensus.
Data Source
AI summary
A method for secure transmission of user-authenticating information is provided. The method includes steps of: a service-providing server (a) determining whether a public key of the user is registered in a blockchain network, and instructing a user-authenticating information generator to generate user-authenticating information for reference, instructing an encrypting engine to encrypt the generated user-authenticating information for reference by using the public key of the user retrieved from the blockchain network, and instructing a message-sending part to transmit the encrypted user-authenticating information for reference to a mobile device of the user; and (b) in case that user-authenticating information for comparison is acquired from the user device and if the user-authenticating information for comparison is determined as identical to the user-authenticating information for reference, providing the user device with the service desired by the user.


