Blockchain-Based Public Key Encryption for Secure Authentication Transmission

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional mobile device authentication services are vulnerable to unauthorized access as authentication numbers can be intercepted during transmission, posing risks to financial services.

Innovation Solution

A method and system for secure transmission of user-authenticating information using a blockchain network, where authentication numbers are encrypted with a user's public key and transmitted to a mobile device, which can only be decrypted using the user's private key, thereby preventing unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication number is transmitted through mobile communication network, then user authentication can be performed, but unauthorized user can intercept the authentication number

Engineering Contradiction:
Improveauthentication securityVSAvoidinterception vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces encryption technology as an intermediary between the authentication number and the transmission channel. The authentication number is encrypted before transmission, creating a secure intermediary layer that prevents direct interception. The encrypted form cannot be understood by unauthorized users during transmission, while the legitimate user can decrypt it using their private key.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the parameter of the authentication number from plaintext to ciphertext form during transmission. By applying encryption transformation, the authentication number's state changes from readable to unreadable, preventing interception while maintaining its functional value for authentication after decryption by the authorized user.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If authentication number is encrypted with public key, then unauthorized users cannot decrypt it, but system complexity increases

Engineering Contradiction:
Improvedata securityVSAvoidencryption system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a self-service authentication system where users generate their own key pairs (public and private keys) and manage their own encryption/decryption processes. The mobile device automatically performs encryption with the public key and decryption with the private key without requiring complex centralized key management infrastructure, reducing overall system complexity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent performs key pair generation and registration in advance before the actual authentication process. Users generate their public-private key pairs beforehand, and the public keys are registered in advance in a public directory or blockchain. This preliminary setup eliminates the need for complex real-time key distribution and management during authentication operations.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If public key is stored in blockchain network, then key registration and retrieval becomes secure, but network dependency increases

Engineering Contradiction:
Improvekey management securityVSAvoidnetwork independence
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent moves key management from a traditional centralized database dimension to a distributed blockchain dimension. By storing public keys in the blockchain network, the system achieves decentralized, tamper-proof key registration and retrieval. This adds a new dimensional approach to key management that enhances security through cryptographic chaining and distributed consensus.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS10594498B2Method and service-providing server for secure transmission of user-authenticating information
Publication Date: 2020.03.17 CPLABS INC
  • US10594498B2 patent drawing
  • US10594498B2 patent drawing
  • US10594498B2 patent drawing

AI summary

A method for secure transmission of user-authenticating information is provided. The method includes steps of: a service-providing server (a) determining whether a public key of the user is registered in a blockchain network, and instructing a user-authenticating information generator to generate user-authenticating information for reference, instructing an encrypting engine to encrypt the generated user-authenticating information for reference by using the public key of the user retrieved from the blockchain network, and instructing a message-sending part to transmit the encrypted user-authenticating information for reference to a mobile device of the user; and (b) in case that user-authenticating information for comparison is acquired from the user device and if the user-authenticating information for comparison is determined as identical to the user-authenticating information for reference, providing the user device with the service desired by the user.