Blockchain Transaction Authentication for Dynamic Login Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods are vulnerable to compromise due to static or semi-static information, and allow access risks when legitimate users use non-approved devices.
Innovation Solution
Authentication based on dynamic transactions stored in a blockchain, where user interactions are recorded as blocks, and hashes are generated and compared to verify identity, enhancing security by making transactions unique and dynamic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If static authentication information (username/password) is used, then ease of operation is improved, but security is worsened due to vulnerability to hacking and compromise
Solution Approach 1:
The patent transforms static authentication credentials into dynamic ones by using blockchain transactions that change with each user interaction. The authentication data is no longer fixed but evolves based on user actions, making each authentication instance unique and resistant to replay attacks while maintaining ease of use through automatic generation.
Solution Approach 2:
The patent changes the fundamental parameter of authentication data from static to dynamic by utilizing blockchain transaction hashes. The authentication credential becomes a function of changing user interactions rather than a fixed value, fundamentally altering how authentication works while preserving usability.
2Reliability
If additional authentication hardware or processes are implemented, then security is improved, but device complexity and ease of operation are worsened
Solution Approach 1:
The patent implements self-service authentication where the user's own interactions with the system automatically generate the authentication credential. The user's actions on the system themselves create the proof of identity, eliminating the need for external hardware or complex verification processes while maintaining high security.
Solution Approach 2:
The blockchain serves as an intermediary that automatically generates and verifies authentication credentials based on user interactions. This intermediary eliminates the need for complex hardware-based authentication systems by using the blockchain's inherent properties to provide secure, hardware-free authentication.
3Ease of operation
If static authentication information is used, then ease of operation is improved, but reliability is worsened because static information is easier to compromise
Solution Approach 1:
The patent makes authentication information dynamic by basing it on blockchain transactions that change with each user interaction. This dynamic nature ensures that authentication data is never repeated and cannot be compromised through static analysis or replay attacks, while keeping the authentication process simple for users.
4Ease of operation
If non-approved devices are allowed for remote access, then ease of operation is improved, but security is worsened due to potential security risks from unsecured devices
Solution Approach 1:
The blockchain acts as a trusted intermediary that verifies user identity through their interaction history rather than trusting the device itself. This allows remote access from any device while maintaining security, as the authentication is based on the user's unique interaction pattern with the system rather than device properties.
Solution Approach 2:
Each user's interactions with the system automatically generate their own authentication credential, making the authentication self-verifying. This eliminates the need to pre-approve or secure specific devices, as the authentication is inherent to the user's interaction with the system rather than the device being used.
Data Source
AI summary
A dynamic transaction associated with a user is identified. For example, the user logging into a server is identified as a dynamic transaction. The dynamic transaction associated with the user is stored in a record (e.g., stored as a block in a blockchain). A first hash from a user device associated with the user is received. The second hash is generated based on the dynamic transaction. A second hash is generated based on the record. The first hash is compared to the second hash. In response to the first hash matching the second hash, the user is authenticated by providing access to a computer resource. For example, the user may be granted access to a database.