Blockchain Smart Contract Authentication System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional OAuth authentication methods are vulnerable to ID and password theft, and require costly certificate issuance, lacking strong security and usability.
Innovation Solution
A method utilizing a blockchain database and smart contracts for secure login delegation, employing multi-signed signatures, temporary IDs, and integrity verification through a consensus mechanism, replacing traditional public certificates with blockchain-based certificates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional OAuth authentication is used, then ease of operation is improved, but security deteriorates due to vulnerability to ID and password theft
Solution Approach 1:
The patent replaces the conventional mechanical ID/password authentication system with a blockchain-based cryptographic system. Specifically, it substitutes the traditional OAuth flow with a system using elliptic curve cryptography, digital signatures, and blockchain smart contracts to achieve both ease of use and enhanced security.
Solution Approach 2:
The patent changes the fundamental parameters of authentication from human-memorable IDs and passwords to cryptographic key pairs and blockchain-based digital signatures. This parameter transformation enables security through mathematical complexity while maintaining user-friendly operation through automated certificate verification.
2Reliability
If conventional public certificates are used, then security is improved, but cost and ease of operation deteriorate due to high issuing cost and inconvenience
Solution Approach 1:
The patent employs temporary, disposable authentication tokens and short-lived certificates instead of expensive, long-term public certificates. The system issues temporary authentication credentials that are valid only for specific operations or time periods, eliminating the need for costly certificate issuance while maintaining security through cryptographic strength.
Solution Approach 2:
The patent implements self-service authentication where the blockchain system automatically verifies certificates and manages authentication without requiring external certificate authorities or manual verification processes. The smart contracts automatically handle certificate validation, eliminating administrative overhead and reducing costs.
3Reliability
If blockchain-based certificates are used, then security and usability are improved, but device complexity increases
Solution Approach 1:
The patent introduces blockchain smart contracts as intermediary components that mediate between the authentication server and the authentication client. These smart contracts encapsulate complex verification logic, allowing the system to achieve high security through blockchain while keeping the user interface simple by handling complexity in the background.
Solution Approach 2:
The patent segments the authentication system into distinct modular components: authentication servers, authentication clients, blockchain nodes, and smart contracts. Each component has a specific function, allowing the system to achieve high security through distributed blockchain verification while maintaining simplicity in each individual component's implementation.
Data Source
AI summary
Once information requesting superseding of a log-in through an authentication app is obtained from a service provision app on a user terminal, a service provision server transfers authentication request response information to the service provision app and, after an authentication redirection request thereof is transferred to the authentication app and then server challenge request information is obtained, server challenge request response information is transferred to the authentication app, thereby supporting the determination as to whether or not certificates of the server and the app are valid, an authentication result message including information on the validity is obtained from an authentication server, a predetermined access token is transferred to the service provision app, and thereby the log-in is handled by providing support such that a service can be used.