Decentralized Identity Login for Shared Computing Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for logging into shared computers in public places lack security, leading to potential leaks of personal information as users often fail to log out correctly, exposing their data to subsequent users.
Innovation Solution
The implementation of a method using decentralized identity documents (DIDs) stored on a blockchain for user authentication, where a QR code is generated and scanned to register and log in, ensuring secure and unique digital identities through asymmetric key encryption, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single user account is created for shared computer access, then ease of operation is improved, but information security deteriorates
Solution Approach 1:
The patent segments user identification into two separate components: a public key that can be freely shared and displayed, and a private key that remains secret and is stored only on the user's device. This segmentation allows multiple users to access the shared computer (maintaining ease of operation) while each user maintains unique secure identification (improving information security). The public key acts as a safe identifier that can be shared without compromising security, while the private key ensures authentic user identification.
2Ease of operation
If traditional login methods are used on shared computers, then ease of operation is maintained, but data protection deteriorates
Solution Approach 1:
The patent extracts the security-critical private key from the shared computer environment and stores it exclusively on the user's personal device (mobile phone or tablet). Only the non-sensitive public key is retained on the shared computer. This extraction eliminates the risk of private key exposure on shared devices while maintaining the convenience of key-based authentication, directly addressing the data protection issue without sacrificing ease of operation.
Solution Approach 2:
The patent introduces asymmetric cryptography (public-key infrastructure) as an intermediary mechanism between user identification and authentication. The public key serves as a safe intermediary that can be shared on the computer, while the private key remains protected on the user's device. This intermediary system enables secure authentication on shared computers without exposing sensitive information, protecting user data while maintaining operational convenience.
Data Source
AI summary
A method of logging in to an operating system applied to an electronic device is provided. A distributed identity document corresponding to a login request is obtained by querying a blockchain in response to the login request. A target public key is extracted from the distributed identity document, and an encrypted first character string is obtained by encrypting a first character string using the target public key. The encrypted first character string is sent to the user terminal. Once a second character string is received from the user terminal, whether or not allow the user terminal to log in to the operating system is determined according to the first character string and the second character string.