Two-Factor Authentication Using Client ID and Pattern Seed
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional user authentication systems rely solely on passwords for authentication, offering limited security as they cannot prevent fraudulent access if the password is leaked, and introducing additional authentication factors like one-time-password tokens can be costly and inconvenient.
Innovation Solution
A two-factor user authentication system that uses a one-time-password derivation rule applied to pattern elements in a presentation pattern, combined with a client ID as a second authentication factor, to enhance security without the need for additional hardware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a one-time-password token is used for authentication, then security is improved, but cost and user convenience deteriorate
Solution Approach 1:
The patent extracts the authentication factor from a physical token and embeds it in the client device's hardware identification information (such as device ID, serial number, or cryptographic key). This eliminates the need for separate one-time-password tokens while maintaining the security benefits of having a second authentication factor that is difficult to replicate or steal.
Solution Approach 2:
The client device is given multiple functions: it serves as both the user interface for password input and as the source of the second authentication factor through its hardware identification. This multi-functionality eliminates the need for separate authentication devices, reducing cost and complexity while maintaining security.
2Reliability
If a one-time-password token is used for authentication, then security is improved, but user convenience deteriorates
Solution Approach 1:
The patent merges the authentication function with the client device itself. The hardware identification information of the client device serves as the second authentication factor, combining what was previously separate (password input device and authentication token) into a single integrated system. This eliminates the need to carry or manage separate tokens.
3Reliability
If additional authentication factors are introduced, then security is improved, but system complexity increases
Solution Approach 1:
The client device provides its own hardware identification information as the second authentication factor without requiring external authentication devices or complex additional systems. The device essentially authenticates itself by presenting its inherent hardware identifiers, which the server verifies alongside the password.
Data Source
AI summary
[OBJECT] Provided is a two-factor user authentication system with a reduced risk of leakage of authentication information. [SOLUTION] The two-factor user authentication system is designed to use, as a password, a one-time-password derivation rule to be applied to certain pattern elements included in a presentation pattern at specific positions so as to create a one-time password, and further use, as a second authentication factor, information identifying a client to be used by a user. An authentication server is operable to generate a pattern seed value adapted to uniquely specify a presentation pattern in combination with a client ID, and transmit the pattern seed value to an authentication-requesting client. The authentication-requesting client is operable to create a presentation pattern based on a client ID acquired therefrom, and display the presentation pattern to allow a user to enter thereinto a one-time password based on the presentation pattern.