Centralized Authentication Server for Secure User Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication systems require users to remember multiple unique passwords and enter personal information for each site, leading to security challenges, inefficiencies, and outdated user data across multiple platforms.
Innovation Solution
A system that generates two random codes, one provided by an authentication server and another by the recipient system, which the user's personal electronic device verifies, allowing secure authentication without storing personal information on the server, thus eliminating the need for users to remember multiple passwords and update information across sites.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users store personal information and passwords on multiple recipient systems, then authentication and data access become possible, but security risks increase and users face the burden of managing multiple credentials
Solution Approach 1:
The patent introduces a centralized authentication server as an intermediary between users and multiple recipient systems. This server stores user credentials and personal information centrally, acting as a mediator that handles authentication requests from various recipient systems without requiring users to directly manage credentials at each system.
Solution Approach 2:
The authentication server provides universal authentication services across multiple different recipient systems. A single user account and credential set issued by the authentication server can be used to access any connected recipient system, eliminating the need for separate credentials at each system.
2Speed
If recipient systems store user personal information locally, then fast access and authentication are achieved, but data security is compromised and outdated information persists across systems
Solution Approach 1:
The authentication server serves as a central intermediary that maintains the authoritative copy of user personal information. When users update their information, changes are made centrally at the authentication server, which then provides updated information to recipient systems upon request, ensuring consistency without requiring local storage at each system.
Solution Approach 2:
The system performs preliminary authentication and information retrieval actions at the centralized authentication server before users access recipient systems. This pre-validation approach ensures that only current, verified information is provided to recipient systems, maintaining both security and accuracy.
3Loss of information
If users update personal information at each recipient system, then data accuracy at each system is maintained, but time consumption increases significantly
Solution Approach 1:
The authentication server provides a universal information management service that serves all recipient systems simultaneously. Users update their personal information once at the authentication server, and this updated information becomes available to all connected recipient systems through the server's information distribution capability.
Solution Approach 2:
The system performs preliminary information synchronization from the centralized authentication server to recipient systems before users need to access them. This ensures that recipient systems have current user information available without requiring users to manually update each system.
4Adaptability or versatility
If multiple recipient systems store copies of user data, then system independence and fast access are achieved, but the risk of bulk data breaches increases
Solution Approach 1:
The authentication server acts as a protective intermediary that recipient systems must query for user information. Instead of storing user data locally, recipient systems communicate authentication requests to the centralized server, which verifies credentials and returns only necessary authentication tokens or verified information.
Solution Approach 2:
The patent extracts sensitive user personal information from local storage at recipient systems and consolidates it at the centralized authentication server. This extraction eliminates the need for recipient systems to maintain local copies of sensitive data while preserving their ability to perform authentication functions through server-mediated processes.
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
The present invention relates to an authentication method which allows a user having a personal electronic device (PED) to authenticate, register or login to a recipient system. Upon interacting with the recipient system, the user is prompted for his unique token ID. The recipient system generates a one-time password (OTP) and sends it to the authentication server together with the token ID and may, in addition, request user's information. The authentication server sends an authentication request to the user's PED including the OTP, which prompts the user for a decision to proceed or not. The user, may decide to proceed with authentication, upon which the PED sends to the recipient system the OTP and a random password created by a previous handshake between recipient system and PED, (RP) stored in the PED, the recipient system authenticating the user thereby by comparing the OTP generated and received and the RP stored and received. If user information was requested, it will be provided to the recipient system together with the authentication data, i.e. the OTP and the RP.