Decentralized Authentication via Distributed Validation Consensus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network services and systems rely on centralized authentication processes, which can be unreliable when the central authentication system is unavailable due to overload, errors, or maintenance.
Innovation Solution
A decentralized authentication process is implemented, where a service provider system enrolls users and selects validation users or devices to validate transaction requests, even if the primary authentication module is unavailable.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If centralized authentication is used, then authentication control is simplified, but system reliability deteriorates when the central authentication system is unavailable
Solution Approach 1:
The patent segments the centralized authentication function into multiple distributed validation users. Instead of relying on a single central authentication server, the system divides authentication tasks among multiple validation users who can independently validate transactions. This segmentation ensures that if one validation user is unavailable, others can continue providing authentication services, thereby improving reliability while maintaining manageable complexity through modular distribution.
Solution Approach 2:
The patent introduces validation users as intermediary entities between the service provider system and the authentication process. These validation users act as mediators that can perform authentication functions on behalf of the service provider, enabling continuous operation even when the primary authentication system is unavailable. The validation users receive validation requests from the service provider and return validation results, serving as reliable intermediaries that maintain authentication capability during system outages.
2Reliability
If decentralized validation users are enrolled, then authentication reliability improves, but system complexity increases
Solution Approach 1:
The patent applies preliminary action by enrolling and pre-configuring validation users before they are needed for authentication. During the enrollment phase, validation users receive their credentials and are registered with the service provider system. This preliminary setup allows the system to quickly deploy validation users when needed without complex on-site configuration, reducing operational complexity while maintaining high reliability through pre-vetted validation participants.
Solution Approach 2:
The patent implements feedback mechanisms where validation users receive validation requests from the service provider, perform authentication checks, and return validation results. The service provider monitors validation user performance and availability, providing feedback that can be used to manage the validation user pool dynamically. This feedback loop enables the system to maintain reliability by identifying and replacing underperforming validation users while managing complexity through automated monitoring and management.
Data Source
AI summary
User authentication and validation for performing transactions may be performed by a validation server of a service provider. For example, when a login request or purchase request is received, the request may be authenticated or validated before permitting the requested transaction. In some arrangements, the validation may be delegated to one or more devices or users external to the service provider. Multiple validation users may be consulted for each transaction request to determine a consensus validation decision. A consensus may be reached based on unanimous responses or based on a specified threshold level (e.g., more than 50% responding positively or negatively). The service provider may use this consensus determination to authorize or reject a transaction request.