Context-Based Authentication String Generation Without Personal Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current user verification methods for secure applications are vulnerable to misuse and require significant storage resources, leading to security risks and reduced online business transactions due to the static nature of stored security verification data.
Innovation Solution
A method that generates a unique authentication string based on a context identifier and a string generator module, eliminating the need for personal information storage and using a secure authentication computing apparatus to verify access requests without relying on dedicated hardware tokens.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static security verification data is stored for each user, then verification can be performed by agents, but the data is susceptible to misuse and requires significant storage resources
Solution Approach 1:
The patent transforms static security verification data into dynamic context-specific strings. Instead of storing fixed personal information, the system generates authentication strings that are dynamically created based on context identifiers and string generator modules. These strings change with each verification request and are tied to specific contexts, making them useless for misuse outside their intended context.
Solution Approach 2:
The system changes the fundamental parameter of security data from static personal information to dynamic generated strings. The authentication process uses context identifiers and string generator modules to create unique strings for each verification instance, rather than relying on stored personal data. This parameter change eliminates the storage requirement for personal security data while maintaining verification capability.
2Speed
If personal security verification data is stored for each user, then verification can be performed quickly, but storage requirements add expense and may not always provide data as quickly as desired
Solution Approach 1:
The patent extracts the personal information component from the security verification process entirely. Instead of storing and retrieving personal security data, the system uses context identifiers and string generator modules to generate verification strings on-demand. This extraction eliminates the need for storage servers maintaining personal security data while enabling rapid verification through computational generation rather than data retrieval.
Solution Approach 2:
The system implements self-service verification where the authentication string is generated by the interaction between the context identifier and the string generator module rather than being retrieved from stored data. The verification process serves itself by computationally creating the necessary verification data at the moment of need, eliminating dependency on pre-stored personal information and associated storage infrastructure.
3Ease of operation
If static security verification data is used, then verification process is simple, but users are reluctant to access secure applications due to security risks
Solution Approach 1:
The patent introduces context identifiers and string generator modules as intermediaries between the user and the verification process. Instead of directly using personal information, the system uses these intermediary components to generate authentication strings. This intermediary layer maintains the simplicity of the verification process for users while fundamentally improving security by eliminating the exposure of personal data that creates trust issues.
Data Source
AI summary
A method, non-transitory computer readable medium, and apparatus that authenticates a user without personal information includes obtaining at a secure authentication computing apparatus a context identifier, a registration identifier of one of a plurality of string generator modules assigned to a client computing device requesting access, and a client string generated by the client computing device requesting access from an agent computing device associated with the client computing device requesting access. An authentication string is generated with the secure authentication computing apparatus based on the obtained context identifier and a corresponding one of the plurality of string generator modules provided to the client computing device requesting access based on the registration identifier. The requested access by the client computing device is granted with the secure authentication computing apparatus when the client string matches the authentication string.