Connection System Passcode Segmentation for Secure Pairing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for establishing connections between terminals via networks face issues with user identifier security, where leakage can lead to harassment and unsolicited communications, and passcode systems with large numbers of digits are prone to input errors and duplication.
Innovation Solution
A connection system that generates and transmits passcodes in stages, allowing for smaller passcode lengths, reducing input errors, and includes authentication mechanisms to prevent duplication and brute-force attacks, while maintaining security through flexible passcode generation and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a passcode of a relatively large number of digits is used to increase safety, then security is improved, but input errors and troubles are induced more often in delivering and registering the passcode
Solution Approach 1:
The passcode is divided into multiple segments or parts that are delivered and input separately. Instead of requiring the user to handle a single long passcode, the system breaks it down into smaller, more manageable segments that can be delivered through different channels or at different times, reducing input errors while maintaining overall security.
Solution Approach 2:
The system performs preliminary actions by pre-delivering portions of the passcode to the user before the actual connection process. This allows users to have the passcode components ready in advance, reducing the complexity of real-time input and minimizing errors during the critical connection phase.
2Ease of operation
If the number of digits of the passcode is simply made small to reduce input errors, then ease of operation is improved, but duplication of passcode and occurrence of safety issues are likely to occur
Solution Approach 1:
The system adds another dimension to passcode verification by using both the passcode value and its delivery timing/channel as verification factors. Even if short passcodes are used, the system can distinguish between legitimate and duplicate passcodes by verifying the temporal and contextual dimensions of passcode delivery, preventing duplication attacks while keeping passcodes short and user-friendly.
3Ease of operation
If a user identifier is used for identifying a user to enable connection, then ease of operation is improved, but security is impaired when the identifier is leaked to a third party
Solution Approach 1:
The system extracts the security-sensitive identification function from the user identifier and relocates it to the passcode mechanism. Instead of relying on the user identifier alone for security, the system separates the identification role (handled by user identifier) from the authentication role (handled by passcode), allowing easy connection through user identifier while maintaining security through the separate passcode verification process.
Data Source
AI summary
A connection server is a connection system that is able to perform communication with a plurality of user side terminals and establishes a connection between the user side terminals, and includes a passcode generator that generates and transmits a passcode to the user side terminal, a passcode storage unit that stores a passcode in association with the user side terminal, a passcode receiving unit that receives a transmission passcode from the user side terminal, a passcode authentication unit that determines whether there is a stored combination of passcodes that matches a combination of a generated passcode and a received transmission passcode, and a connection unit that establishes a connection between the user side terminals in response to the determination.