Client Identifier Authentication via Distributed Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing username and password approach to user authentication on secure servers is vulnerable to security flaws, requiring interactive self-authentication and storing credentials in a way that is susceptible to theft or alteration.
Innovation Solution
A system and method for streamlined user authentication using a securely stored client identifier, which is uniquely associated with a user and stored in a distributed data storage system as immutable records, allowing for automatic and secure authentication without user interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If username and password approach is used for user authentication, then user identity can be verified, but security vulnerabilities increase and interactive self-authentication is required
Solution Approach 1:
The system enables automatic authentication where the client device autonomously retrieves its client identifier from the distributed data storage system and presents it to the authentication server without requiring user interaction. The authentication process is self-executing, eliminating the need for manual username and password entry while maintaining security through the immutable stored identifier.
2Reliability
If credentials are stored for authentication, then user identification is enabled, but security vulnerabilities to theft or alteration increase
Solution Approach 1:
The authentication system segments the credential storage by distributing client identifiers across multiple nodes in a distributed data storage system rather than centralizing them in a single database. This segmentation prevents single-point failures and reduces the impact of potential breaches, as each node stores only a portion of the overall authentication data.
Solution Approach 2:
The client identifier is pre-stored in the distributed data storage system during system initialization or user registration, before any authentication events occur. This preliminary action ensures that the credential is already in place and immutable, eliminating the need for repeated transmission or storage of sensitive authentication data during operational authentication cycles.
3Reliability
If client identifier is stored in distributed data storage system, then secure storage is achieved, but data accessibility must be restricted to authorized entities only
Solution Approach 1:
The system implements local quality by providing differentiated access to the stored client identifier: the client device receives and uses its own identifier for authentication, while the authentication server retrieves and verifies the identifier. Other entities in the system do not have access to the raw identifier, ensuring that each component receives only the specific data quality it needs for its function.
Data Source
AI summary
A system and method provide streamlined restricted access to a secure server through a communications network. A client identifier parameter value is established and uniquely associated with a user registering with an authentication server, and is stored in at least first and second predetermined storage forms within a data storage system, the first form readable exclusively by a client device of the user and the second form readable by the authentication server. The client device then authenticates by retrieving the client identifier parameter value from the data storage system and providing it to the authentication server, which independently retrieves the client identifier parameter value from the data storage system for comparison, and initiates an interactive communication session between the client device and the secure server responsive to the comparison. Between comparisons, the client identifier parameter values are stored exclusively on the data storage system and deleted from all other devices.