Cryptographic Device Secure Mode Message Display
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current two-factor authentication (2FA) methods for secure online transactions, particularly those using smartphones, are vulnerable to attacks where a compromised device can break both factors, compromising transaction authenticity and integrity, especially when a single device serves both factors, and existing solutions do not adequately address full system compromises or transaction integrity issues.
Innovation Solution
A cryptographic device and method utilizing a processor system with a normal mode and a secure mode, where data and code are isolated, with a private key stored in the secure mode to decrypt messages from a server, and a shared secret is set during enrollment, ensuring only the secure mode software can display messages, thereby increasing transaction integrity and authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single device (smartphone) is used for both authentication factors in 2FA, then convenience and accessibility are improved, but security is worsened because compromising the device breaks both factors
Solution Approach 1:
The patent divides the authentication system into two independent components: a cryptographic device (hardware token) that generates authentication codes and a smartphone that displays transaction information. This segmentation ensures that even if the smartphone is compromised, the cryptographic device remains secure and can still provide valid authentication, thus maintaining security while preserving convenience.
2Ease of operation
If normal mode software is used to display messages, then ease of operation is improved, but transaction integrity is worsened because compromised software can display misleading information
Solution Approach 1:
The patent introduces a shared secret as an intermediary verification mechanism. The cryptographic device generates authentication codes that are encrypted with the user's public key and can only be decrypted by the user's private key. The shared secret (displayed on the cryptographic device screen) serves as a mediator that proves the authentication code was generated by the legitimate cryptographic device, not by compromised software on the smartphone.
3Reliability
If encryption with public key is used, then security is improved, but device complexity is worsened due to key management requirements
Solution Approach 1:
The patent performs key pair generation and sharing in advance during an enrollment phase. The user's public key is stored in the cryptographic device, while the corresponding private key is securely stored in the user's account on the server. This preliminary setup eliminates the need for complex real-time key management during authentication operations, simplifying the device while maintaining security.
Data Source
AI summary
Some embodiments are directed to secure communication with a server from a device. The device is configured to decrypt an encrypted message in a secure mode with a private key, and to display secret shared with the user together with the decrypted message on a display of the device to indicate to the user that the message is being displayed by software running in the secure mode.