Cognitive Multifactor Authentication With Segmented Security Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing human-machine authentication methods rely heavily on technology, neglecting the cognitive abilities of individuals, leading to increased security risks and complexity, and fail to effectively integrate established cryptographic mechanisms for individual use.
Innovation Solution
The dopeIN method integrates cognitive performance of individuals through a user-defined algorithm-based multifactor authentication, allowing for ad hoc use of cryptographically mature security mechanisms, distributing authentication inputs, and enabling parallel processing of multiple security levels without requiring cryptography knowledge.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional authentication codes are used for security-critical actions, then the authentication process is simple, but security risks increase due to potential interception and reuse by attackers
Solution Approach 1:
The authentication code is segmented into multiple individual security fragments (first security fragment, second security fragment, etc.) that are processed separately. Each fragment represents a portion of the overall authentication code, and they are combined through cryptographic operations to generate the final authentication result. This segmentation prevents attackers from obtaining the complete authentication code through interception.
Solution Approach 2:
A cryptographic intermediary mechanism is introduced that processes security fragments through defined operations (addition, subtraction, multiplication, division, concatenation, etc.) before generating the final authentication code. This intermediary layer ensures that even if individual fragments are intercepted, they cannot be directly reused without the proper cryptographic processing context.
2Reliability
If multiple security levels are implemented to enhance security, then security reliability improves, but device complexity and user effort increase
Solution Approach 1:
Multiple security levels are merged into a unified authentication framework where different security fragments can be combined through cryptographic operations. The system allows parallel processing of multiple security fragments simultaneously, integrating multiple security checks into a single coherent authentication process rather than requiring separate sequential steps.
Solution Approach 2:
The authentication system dynamically adjusts the number and type of security fragments based on the specific security requirements of different actions. The system can adaptively select which security fragments to use and how to process them, allowing flexibility in security level adjustment without requiring fixed complex structures for all authentication scenarios.
3Reliability
If cryptographic mechanisms are integrated into the authentication process, then security improves, but the system requires deeper cryptographic knowledge from users
Solution Approach 1:
The system performs cryptographic operations automatically without requiring users to understand or manually execute cryptographic procedures. Users simply provide input data, and the system's cryptographic module autonomously processes security fragments through defined operations to generate authentication codes, making cryptographic security transparent to the user.
Solution Approach 2:
A cryptographic intermediary layer handles all complex cryptographic operations between the user and the security system. This intermediary automatically manages the processing of security fragments through various cryptographic operations (addition, subtraction, multiplication, division, concatenation, etc.) without exposing the complexity to users, who only need to interact with simplified input interfaces.
4Adaptability or versatility
If authentication codes are transmitted via data transmission channels, then remote authentication is enabled, but security risks increase due to potential decryption by attackers
Solution Approach 1:
The authentication code transmitted through data channels is segmented into multiple security fragments that are processed separately. Instead of transmitting a complete authentication code that could be decrypted and reused, the system transmits individual fragments that require proper cryptographic processing to reconstruct the authentication result, preventing direct reuse by attackers who intercept the transmission.
Solution Approach 2:
The system changes the parameters of authentication data during transmission by applying cryptographic operations to security fragments. The authentication data is transformed through various operations (addition, subtraction, multiplication, division, concatenation, etc.) so that the transmitted data represents processed security fragments rather than raw authentication codes, making intercepted data unusable without the proper processing context.
Data Source
AI summary
A method for performing a human-machine authentication process by a user. An authentication system is provided using technical security systems for generating, managing and executing an authentication algorithm. This is achieved by an administrator implementing security fragments in the form of patterns, policies and/or algorithm templates, by virtue of the administrator managing the security fragments, by generating the algorithm from implemented security fragments and by linking to an authentication code. The authentication process is carried out by way of credentials and automated generation of temporary authentication data and enables transmission to the user, with a data exchange taking place between the security system and the authentication system through synchronization processes for the purpose of exchanging non-public data. The code is applied by the system user by virtue of the temporary authentication data being converted into a temporary input code and the technical security system carrying out an authentication check.