Challenge-Response Authentication System Preventing Reuse
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing challenge-response authentication protocols are compromised when a set of challenge and response is intercepted or wiretapped, leading to increased risk of improper authentication, especially during frequent authentication processes.
Innovation Solution
A device and authentication system that includes a storage unit for generated challenges, a determination unit to match newly generated challenges, an output unit to provide unused challenges, and a registration unit to store new challenges, ensuring high security by preventing reused challenges and responses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the authentication device performs authentication by again generating the same challenge that was intercepted or wiretapped, then the authentication process can be completed efficiently, but the security of authentication is compromised
Solution Approach 1:
The patent applies preliminary action by storing generated challenges in advance in a storage unit before they are needed for authentication. This allows the system to check whether a newly generated challenge has already been used by comparing it with stored challenges, thereby preventing reuse of intercepted challenges while maintaining efficient authentication processing.
2Loss of time
If challenge-response pairs are stored for future authentication, then authentication can be performed faster, but intercepted challenges can be reused leading to security breaches
Solution Approach 1:
The patent implements feedback by continuously monitoring and checking whether a newly generated challenge matches any previously stored challenges before using it for authentication. This feedback mechanism ensures that even though challenges are stored to speed up authentication, the system can detect and prevent reuse of intercepted challenges, thereby maintaining security.
Data Source
Figure 1~3
Figure 4~5
Figure 6~7
AI summary
A device includes a storage unit that stores generated challenges which are challenges previously generated, a determination unit that determines whether a newly generated challenge matches any of the generated challenges or not, an output unit that outputs the newly generated challenge as an unused challenge when the determination unit determines that the newly generated challenge does not match any of the generated challenges, and a registration unit that stores the newly generated challenge as a new generated challenge in the storage unit when the determination unit determines that the newly generated challenge does not match any of the generated challenges.