Central Authorization System Segmentation for Flexible Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Central authorization systems are inflexible and costly when dealing with personal authentication devices unknown to the system, as they require complex and expensive readers for verification.
Innovation Solution
A method where authentication data from personal authentication devices is included in a request message and transmitted to a central authorization system, allowing the system to perform authentication and authorization processes without the need for readers to interpret the data, enabling low-cost, flexible implementation and user access even for unknown devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If readers include complex processors and memory for verifying authentication data, then authorization reliability is improved, but device complexity and cost increase
Solution Approach 1:
The system is divided into two functional parts: a simple reader that only captures and forwards authentication data, and a central authorization system that performs verification. This segmentation allows the reader to be low-cost while maintaining reliable authorization through centralized processing.
Solution Approach 2:
The central authorization system acts as an intermediary between the reader and the authentication database. It receives authentication data from the simple reader, verifies it against stored data, and returns authorization decisions, thereby enabling reliable verification without complex readers.
2Reliability
If the central authorization system maintains a closed list of known devices, then security is improved, but adaptability to unknown devices deteriorates
Solution Approach 1:
The authorization system transitions from a static closed list to a dynamic verification process. Instead of checking against a fixed list of known devices, the system dynamically verifies authentication data from any device against stored authentication templates, allowing flexible adaptation while maintaining security.
Solution Approach 2:
The system changes the verification parameter from device identity recognition to authentication data validation. By verifying cryptographic authentication data rather than device identifiers, the system can securely authorize unknown devices without compromising security.
3Productivity
If readers perform authentication verification locally, then processing speed is improved, but device complexity and cost increase
Solution Approach 1:
Processing functions are segmented between the reader and central system. The reader performs only lightweight data capture and forwarding, while the central system handles computationally intensive verification. This maintains overall processing speed while eliminating the need for complex local readers.
Solution Approach 2:
The central authorization system serves itself by maintaining local copies of authentication data and performing verification autonomously. This eliminates the need for readers to have complex verification capabilities, as the central system handles all processing demands.
Data Source
AI summary
The invention relates to a method for authorizing a person. The method comprises the step of receiving authentication data from a personal authentication device transmitting said data to a reader associated with a central authorization system. Further, the method comprises the steps of including the received authentication data in a request message and transmitting the request message to the central authorization system, receiving the request message at the central authorization system and retrieving the authentication data from the request message. The method also comprises the steps of performing an authentication process at a central authentication system using said reader authentication data and executing an authorization process at the central authorization system based on the authentication process result.