Contactless Digital Identity Authentication via Challenge-Response

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional methods for securing transactions, such as using passwords or biometrics, are not secure and can be compromised, and they often require physical interaction with access devices, which can be undesirable, especially in environments with pathogens.

Innovation Solution

A method involving an identity server computer that receives a credential from an access device, transmits a challenge to a mobile device operated by the user, receives a signed challenge using a private key on the mobile device, verifies the signed challenge using a public key, and transmits the signed challenge to the access device to generate an authorization request message.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If passwords or biometrics are used for authentication, then user access can be controlled, but security is compromised when passwords are stolen or biometric databases are hacked

Engineering Contradiction:

Improveauthentication securityVSAvoiddata theft and fraud

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent uses cryptographic key pairs (public/private keys) where the public key is copied and distributed to authentication servers, while the private key remains securely stored on the user's device. This allows authentication without storing sensitive biometric or password data centrally, eliminating the risk of database hacks compromising user credentials.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The patent introduces a cryptographic challenge-response mechanism as an intermediary between the user and the authentication server. The server sends a challenge, the user's device signs it with the private key, and the server verifies it with the public key. This intermediary protocol prevents direct exposure of sensitive data while maintaining secure authentication.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If physical interaction with access devices is required, then authentication can be performed, but user convenience is reduced and pathogen transmission risk increases

Engineering Contradiction:

Improveauthentication capabilityVSAvoiduser convenience and safety

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical/physical interaction system (typing passwords, touching biometric sensors) with a wireless cryptographic communication system. The user's mobile device communicates authentication credentials wirelessly with the access device, eliminating physical contact and reducing pathogen transmission risk while maintaining secure authentication capability.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent uses digital copies of authentication data (cryptographic signatures) instead of physical interaction. The signed challenge is transmitted as digital data between devices, replacing the need for physical contact with access devices while maintaining authentication reliability.

Inventive Principle:

Principle #26Copying

Data Source

PatentUS12206801B2Digital identity authentication system and method

Publication Date: 2025.01.21 VISA INTERNATIONAL SERVICE ASSOCIATION

AI summary

A method for authenticating a user performed by an identity server computer is disclosed. The method comprises receiving, by a server, a user device identifier from an access device. The server transmits a challenge to a mobile device operated by a user, and the mobile device signs the challenge. The server receives and verifies the signed challenge and then provides the signed challenge or a portion thereof to an access device, which processes the transaction with the signed challenge.