Data-Based Authentication Using File Set Similarity Trees
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods, such as two-factor authentication, can be cumbersome for users, particularly in highly sensitive systems like backup storage, where additional verification steps like one-time passcodes are required, degrading the user experience and increasing security vulnerabilities.
Innovation Solution
The implementation of a data-based authentication system that uses similarity trees to compare file sets between a client and a backup storage server, allowing for efficient and automatic multi-factor authentication without the need for manual input of additional verification codes, by calculating a similarity index to verify user access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If two-factor authentication with one-time passcode is implemented, then security is improved, but user experience and ease of operation deteriorate
Solution Approach 1:
The system automatically performs authentication by comparing file sets between client and server without requiring manual user action. The client automatically transmits file set data, and the server automatically compares it with stored backups, eliminating the need for users to manually enter passcodes or interact with authentication mechanisms.
Solution Approach 2:
The patent replaces the mechanical interaction of manual passcode entry with an automated data comparison mechanism. Instead of users physically entering verification codes, the system uses automated file hash comparison algorithms to perform authentication, substituting human action with computational processes.
2Reliability
If manual one-time passcode entry is required, then security is improved, but time consumption and productivity worsen
Solution Approach 1:
The system performs authentication checks automatically as part of the normal file access workflow. File set comparisons are conducted in advance or concurrently with access requests, rather than requiring separate authentication steps. This integrates security verification into the existing operational flow, eliminating additional time requirements.
3Reliability
If additional authentication verification steps are added, then security is improved, but system complexity worsens
Solution Approach 1:
The file set comparison mechanism serves multiple functions: it authenticates user identity, verifies data integrity, and confirms client-server synchronization. By using a single data comparison process to achieve multiple security and operational goals, the system avoids adding separate authentication mechanisms and their associated complexity.
Data Source
AI summary
A request is received from a user at a client to access a file of a set of files backed up to a backup server. Upon verifying a password provided by the user, the client is issued another request for authentication. A first data structure is received responsive to the request. The first data structure is generated using identifiers corresponding to a set of files at the client of which at least some presumably have been backed up to the server. A second data structure is generated. The second data structure is generated using identifiers corresponding to the set of files backed up to the server. The first and second data structures are compared to assess a degree of similarity between the files at the client and the files backed up to the backup server. The user is denied access when the degree of similarity is below a threshold.