Cross-Referencing Device With Buffered Time-Synchronized OTPs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing one-time password (OTP) cross-referencing technologies are costly and require high processing power, making them unsuitable for devices with limited computational resources, and they struggle with maintaining time synchronization without access to standard radio waves.
Innovation Solution
A cross-referencing device with a built-in clock and authentication calculation unit that generates time-synchronized OTPs using a hash function, storing (N+1) numerical values to allow authentication within a certain time deviation, reducing processing load and cost.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If time-synchronized OTP cross-referencing is implemented using conventional methods, then authentication security is improved, but device cost and processing power requirements increase
Solution Approach 1:
The patent applies preliminary action by pre-calculating and storing multiple future OTP values (N+1 values) in the authentication calculation unit before they are needed. This allows the device to handle time deviations without requiring complex real-time synchronization mechanisms or high processing power during authentication, thereby reducing device cost while maintaining security
Solution Approach 2:
The patent implements dynamics by allowing the authentication calculation unit to flexibly select any matching OTP value from the stored N+1 values based on the actual time deviation that occurs. The system dynamically adapts to time synchronization issues without requiring rigid time synchronization protocols, reducing device complexity while preserving authentication reliability
2Measurement precision
If standard radio wave receiving units are added to terminals for time synchronization, then time synchronization precision is improved, but device cost and installation flexibility worsen
Solution Approach 1:
The patent extracts the time synchronization dependency from the terminal device by implementing the OTP cross-referencing and time deviation handling entirely within the authentication calculation unit on the server side. The terminal only needs to generate OTPs using its built-in clock without any radio wave receiving units, thereby maintaining installation flexibility while achieving time synchronization precision through the server's buffer mechanism
Solution Approach 2:
The patent introduces an intermediary buffer mechanism in the authentication calculation unit that stores N+1 OTP values. This buffer acts as a mediator between the terminal's clock and the server's clock, absorbing time deviations without requiring direct time synchronization through radio waves, thus preserving installation flexibility while achieving sufficient synchronization precision for secure authentication
3Reliability
If OTP cross-referencing is performed with strict time synchronization, then authentication reliability is improved, but processing load and cost increase
Solution Approach 1:
The patent applies preliminary action by pre-generating and storing N+1 OTP values in the authentication calculation unit before authentication requests arrive. When an authentication request is received, the system simply compares the received OTP against the pre-computed values in the buffer, dramatically reducing processing load during actual authentication while maintaining high reliability through the time deviation buffer
Solution Approach 2:
The patent uses partial action by storing only the necessary N+1 OTP values in the buffer rather than all possible future values. This provides sufficient coverage for typical time deviations while keeping the processing load and memory requirements manageable, achieving an optimal balance between authentication reliability and processing efficiency
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach enables low-cost, efficient OTP cross-referencing with reduced processing load, ensuring time synchronization and resistance to replay attacks even in devices with limited computational power.
Implementation Method 1
The one-time password is calculated from a one-way hash function by using the same algorithm on both the hardware token and the online banking server and inputting the current time and the passphrase for each predetermined time increment by the clocks
Data Source
AI summary
To realize one-time password cross-referencing at low cost. A cross-referencing device includes a clock unit which keeps time by a built-in clock, and an authentication calculation unit which has a minor password FIFO capable of storing (N+1) numerical values from a last written numerical value to a numerical value written N (N being a natural number) before and which generates a time-synchronized first cross-referencing one-time password at a time point having a predetermined time relationship with the current time at predetermined first time interval on the basis of the time indicated by the clock, writes the same in the minor password FIFO, and determines that authentication is successful where an authentication target one-time password received in a first authentication request matches with any of the (N+1) first cross-referencing one-time passwords in the minor password FIFO.