Digital Data Authentication via Client-Server Tag Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security measures for protecting computer programs and financial transactions over networks, such as user passwords and one-time passwords, are inadequate against advanced attacks like man-in-the-middle, phishing, and malware, leading to concerns about data integrity and user confidence in online banking and financial systems.
Innovation Solution
A method that verifies the authenticity of digital documents by computing and comparing authentication tags, ensuring that requests for secondary documents originate from authentic sources, thereby detecting unauthorized modifications and enhancing security in data transmission applications like net-banking systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security measures (passwords, one-time passwords) are used to protect client-server connections, then ease of operation is maintained, but reliability is insufficient against advanced attacks
Solution Approach 1:
The patent applies preliminary action by computing authentication tags in advance for both the server (for digital documents) and the client (for requests). The server computes an authentication tag for the digital document before transmission, and the client computes an authentication tag for the request before sending. This pre-computation ensures that security verification is already in place before the actual communication occurs, preventing attacks rather than just detecting them afterward.
Solution Approach 2:
The patent implements feedback by having the server verify the client's authentication tag and the client verify the server's authentication tag. This mutual verification creates a feedback loop where both parties confirm each other's authenticity. The server sends back a response that includes verification results, providing feedback to the client about whether the connection is secure, thereby enabling informed decision-making about transaction safety.
2Reliability
If authentication tags are computed and transmitted for every document and request, then reliability is improved, but loss of information increases due to additional data transmission
Solution Approach 1:
The patent applies the extraction principle by separating the authentication tag from the main data content. The authentication tag is computed on the digital document and request separately, then transmitted as distinct elements. This allows the verification process to focus on the tag while the main content remains separate, optimizing both security verification efficiency and data transmission management.
3Reliability
If mutual authentication verification is implemented between server and client, then reliability is improved, but device complexity increases
Solution Approach 1:
The patent applies self-service by enabling each party (server and client) to independently compute and verify authentication tags without requiring a third-party authentication service. The server computes its own authentication tag for the digital document, and the client computes its own authentication tag for the request. Each party also independently verifies the other's tag, eliminating the need for external authentication infrastructure and reducing system complexity while maintaining high security.
Data Source
AI summary
A method for protecting a digital document and user data typed into a digital document is presented. The method comprises computation of an authentication tag when the document is sent from a server. A similar authentication tag is computed when the document is shown on a client. When another document referenced in the document is requested by the client from the server, the authentication tag computed by the client is attached to the request for that other document. The server receiving the request compares the authentication tag it computed with the one it received to verify if the request came from an authentic copy of the document. The method is suitable for protection of online banking, online investment, online shopping, and other electronic applications.