Cryptographic Processing System Using Segmented Memory and Intermediary Test
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Many cryptographic processing systems lack secure memory to store sensitive data, making them vulnerable to attacks, and existing solutions like CAPTCHA-based systems can be bypassed through brute force methods due to limited complexity of passwords.
Innovation Solution
A cryptographic processing method and system that stores a reference value and test in memory but not the solution, requiring user interaction to differentiate humans from computers, thereby enhancing security by preventing automatic recovery of sensitive data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensitive data is stored in unsecured memory due to lack of secure memory space, then the system can function with available resources, but the system becomes vulnerable to attacks and sensitive data can be easily recovered
Solution Approach 1:
The patent segments the sensitive data storage into two parts: a secure part (stored in unsecured memory but protected by cryptographic functions) and a test part (stored in unsecured memory). This segmentation allows the system to maintain security without requiring dedicated secure memory hardware, resolving the contradiction between security and device complexity.
Solution Approach 2:
The patent introduces a test (such as CAPTCHA) as an intermediary mechanism between the stored data and the authentication process. This test acts as a mediator that prevents automatic brute force attacks while allowing human users to authenticate, thereby improving security without adding complex hardware components.
2Reliability
If password hash values are stored to prevent direct password recovery, then security is improved, but brute force attacks can still recover passwords by testing various possible passwords
Solution Approach 1:
The patent introduces a test (such as CAPTCHA) as an intermediary that must be solved during authentication. This intermediary prevents automatic brute force attacks by requiring human cognitive processing, while still allowing legitimate users to authenticate. The test is stored in unsecured memory alongside the password hash, creating an additional layer of security without complicating the user experience.
3Productivity
If the solution to the test is stored in memory alongside the reference value, then the authentication process can be completed, but attackers can automatically recover both values and bypass security
Solution Approach 1:
The patent uses the test as an intermediary element that is stored in unsecured memory alongside the reference value. The test acts as a security barrier because while both the test and reference value are accessible in memory, an attacker cannot automatically exploit them without solving the test, which requires human cognitive processing. This maintains authentication speed while improving security against automatic attacks.
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
The method involves configuring a cryptographic processing system i.e. terminal by obtaining and memorizing a reference value (Co) in the terminal (E0). A memorized test (ChallR) is transmitted (E10) to a user, and a response (R') is obtained (E20) from the user. A cryptographic processing of the reference value and a cryptographic function is performed (E30) based on a sensitive data item e.g. password, where the reference value and the test are in the memory of the terminal, and a solution is not in the memory of the terminal during the transmission of the test. Independent claims are also included for the following: (1) a computer program for cryptographic processing (2) a processor readable medium storing a program for cryptographic processing (3) a cryptographic processing system.