Confidential Data Management via Secure Authentication Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data decryption methods require users to input a decryption key each time they access encrypted data, causing inconvenience and security risks due to potential external hacking.
Innovation Solution
A secure authentication system involving a first communication terminal, a second communication terminal, a service server, and a security server, where the security server transmits a decryption key to the second terminal via a push notification message, allowing the user to access encrypted data without re-entering the key, and generates authentication information through a security keypad to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users input decryption key each time to access encrypted data, then security is improved, but user convenience deteriorates
Solution Approach 1:
The system segments the authentication process into two parts: the user stores the decryption key in the secure authentication system in advance, and during access only simple authentication information input is required. The system automatically retrieves and applies the stored decryption key, separating the complex cryptographic operation from the user interaction.
Solution Approach 2:
The decryption key is stored in the secure authentication system in advance before actual data access is needed. This preliminary storage action eliminates the need for users to re-enter the key during each access, while the key remains securely stored and only activated when proper authentication occurs.
2Ease of operation
If decryption key is stored in single location, then access convenience is improved, but security against hacking deteriorates
Solution Approach 1:
The system segments the storage locations into two distinct components: the user's communication terminal which stores authentication information, and the secure authentication server which stores the decryption key. This spatial segmentation ensures that even if one location is compromised, the other remains protected, maintaining security while enabling convenient access through coordinated retrieval.
Solution Approach 2:
The secure authentication server acts as an intermediary between the user's terminal and the encrypted data. It holds the decryption key securely and only releases it after verifying authentication information, mediating the access process to maintain both security and convenience without requiring the key to be permanently resident in the user's device.
3Reliability
If authentication information is transmitted through multiple devices, then security is improved, but system complexity increases
Solution Approach 1:
The authentication process is segmented across three components: the first communication terminal that initiates authentication, the secure authentication server that verifies credentials and manages decryption keys, and the second communication terminal that receives authenticated data. This segmentation distributes security functions while maintaining a clear, manageable system architecture.
Solution Approach 2:
The secure authentication server performs multiple functions: it stores decryption keys, verifies authentication information, and coordinates data transfer between terminals. This multi-functionality consolidates complex security operations into a single centralized component, reducing overall system complexity while maintaining robust security through centralized control.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a method for safely managing confidential data and a security authentication method and system for performing a security authentication by using the confidential data. The method for managing confidential data of a user by linking with a security server which stores a decryption key in a confidential data management device, according to the present invention, comprises the steps of: storing encrypted confidential data of a user; receiving a push notification message including a decryption key from the security server, if a use of the confidential data is required; and decrypting the encrypted confidential data by using the decryption key included in the push notification message.