DPoP Token Binding with Device Fingerprint for Secure Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data security mechanisms, such as demonstration of proof of possession (DPoP), are limited in performing both transaction authorization and user authentication effectively.

Innovation Solution

A system and method that integrate DPoP with device fingerprint and contactless card data to provide a unified mechanism for transaction authorization and user authentication, ensuring secure and non-transferable access tokens.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If DPoP is used for transaction authorization, then access token security is improved, but user authentication capability is lost

Engineering Contradiction:

Improveaccess token securityVSAvoiduser authentication capability

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent combines DPoP (demonstration of proof of possession) with device fingerprinting technology into a unified authentication and authorization system. The server receives both a DPoP token proving possession of a private key and device fingerprint data identifying the user's device, merging these two separate security mechanisms into a single comprehensive solution that simultaneously provides access token security and user authentication capability.

Inventive Principle:

Principle #5Merging (Combining)

2Reliability

If multiple authentication factors are added, then security is improved, but system complexity increases

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent creates a multi-functional authentication system where a single integrated process handles multiple security functions. The server simultaneously performs DPoP token verification, device fingerprint validation, and access token issuance within one unified workflow. This universal approach allows the system to implement multiple authentication factors without proportionally increasing complexity, as the same infrastructure serves multiple security purposes.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS20250132916A1Systems and methods of authorization and authentication based on demonstrated proof of possession and device fingerprint

Publication Date: 2025.04.24 CAPITAL ONE SERVICES LLC

AI summary

An authorization and authentication method can comprise receiving, by a server from a user device, a request to generate an access token. The request includes a demonstration of proof of possession (DPoP) Java web token (JWT) that can include a public key, a payload, and a signature. The payload can include fingerprint data of the user device and a unique identifier of a contactless card associated with a user of the user device. The method can further comprise extracting, by the server, the DPoP JWT from the request to generate an access token and verifying, by the server, the signature using the public key included in the DPoP JWT. The method can further comprise authenticating, by the server, the payload, generating, by the server, the access token, binding, by the server, the public key to the access token, and transmitting, by the server, the access token to the user device.