Blockchain Short Message Verification via Smart Contract Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional short message verification methods suffer from low security, allowing servers and short message operators to potentially impersonate users and compromising verification integrity, especially when the server is compromised or tampered with.
Innovation Solution
A blockchain-based short message verification method where a client generates and encrypts a serial number, which is sent to a server and stored in a smart contract, alongside a randomly generated verification code, ensuring that neither the server nor the short message operator can access the original code until user verification, thus preventing impersonation and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional short message verification is used where server and short message operator know the verification code content, then verification process is simple, but security is low and impersonation can occur
Solution Approach 1:
The patent introduces a blockchain system as an intermediary between the client, server, and short message operator. The blockchain stores encrypted verification codes and serial numbers, acting as a trusted mediator that prevents any single party from accessing the plaintext verification information. This resolves the security issue while maintaining a manageable system architecture through the use of smart contracts for automated verification.
Solution Approach 2:
The patent uses encryption to create a secure copy of the verification code and serial number, storing them on the blockchain in encrypted form. The original plaintext information never leaves the generating party, while the encrypted copy on the blockchain enables verification without exposing sensitive data. This allows verification functionality while preventing impersonation.
2Reliability
If verification codes are stored in plaintext on server, then verification is fast, but server compromise leads to verification failure and security breaches
Solution Approach 1:
The patent changes the state of verification codes from plaintext to encrypted form on the blockchain. The encryption parameter ensures that even if the blockchain data is accessed, the verification codes remain secure. The smart contract handles decryption and verification automatically, maintaining fast verification speed while providing strong anti-tampering capabilities.
Solution Approach 2:
The smart contract on the blockchain performs self-service verification by automatically comparing the provided verification code with the stored encrypted version. This eliminates the need for manual intervention or complex server-side verification logic, reducing verification time while enhancing security through cryptographic protection.
3Reliability
If server and short message operator access verification codes, then verification can be performed, but both parties can impersonate users
Solution Approach 1:
The blockchain acts as an intermediary that neither the server nor short message operator can compromise. They can submit verification requests and receive results, but neither can access the plaintext verification codes or serial numbers. This maintains verification functionality while preventing impersonation by both parties.
Solution Approach 2:
The verification information is segmented into two parts: encrypted serial numbers stored by the server and encrypted verification codes stored by the short message operator on the blockchain. Neither party has access to both parts in plaintext form, preventing them from reconstructing the full verification information for impersonation purposes.
Data Source
AI summary
A block chain-based short message verification method that includes a client randomly generating a sequence number and encrypting the sequence number; the client sending a mobile phone number and the encrypted sequence number to a service end; the service end sending the mobile phone number and the encrypted sequence number to a short message operation end to store same in an intelligent contract of a block chain; the short message operation end randomly generating a verification code and sending the verification code to the client; the short message operation end encrypting the verification code and correspondingly storing a mobile phone number, the encrypted sequence number and the encrypted verification code into the intelligent contract of the block chain. Said method can prevent a server and a short message operator from impersonating a user for short message verification before the user performs verification, thereby improving the security of short message verification.