Dynamic Authentication Code Emulation via Keyboard Input
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods, such as static username-password schemes, are insecure and difficult to implement, while token-based and biometric solutions face challenges like high costs, integration issues, and user convenience concerns, necessitating a more efficient and cost-effective identification and authentication system.
Innovation Solution
A device with a cryptographic processor and interface that emulates keyboard input to generate and transmit dynamic authentication codes, incorporating a keypad, joystick, or fingerprint scanner for secure authentication, without the need for additional power sources or complex installation, using standard keyboard ports and protocols to ensure compatibility and ease of use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If static username-password authentication is used, then the system is simple to implement, but security is weak and vulnerable to interception and replay attacks
Solution Approach 1:
The patent transforms static authentication into dynamic authentication by generating time-varying passwords that change with each authentication attempt. The system uses a password generator that creates unique passwords based on time stamps and random values, ensuring that each authentication attempt uses a different credential pair, thereby preventing replay attacks while maintaining simplicity.
Solution Approach 2:
The patent changes the parameter of the password from static to dynamic by introducing time-based variability. The password generator modifies the password value based on time stamps and random factors, creating a moving target for authentication that strengthens security without significantly increasing system complexity.
2Reliability
If token-based dynamic authentication is used, then security is improved, but device cost and complexity increase
Solution Approach 1:
The patent makes the password generator universal by designing it to work across multiple platforms and applications without requiring device-specific hardware tokens. The software-based generator can be deployed on standard computers and mobile devices, eliminating the need for specialized authentication hardware and reducing overall system complexity.
Solution Approach 2:
The patent creates a virtual copy of the token functionality through software rather than requiring physical hardware tokens. The password generator replicates the security functions of hardware tokens in software form, making the system more accessible and reducing device complexity while maintaining security strength.
3Reliability
If smartcard authentication is used, then security is enhanced, but integration issues and deployment costs increase
Solution Approach 1:
The patent replaces the mechanical smartcard system with a software-based password generator that operates through standard input interfaces. This substitution eliminates the need for physical card readers, drivers, and hardware integration, thereby reducing integration complexity while maintaining security through dynamic password generation.
Solution Approach 2:
The password generator is designed to be self-contained and self-configuring, requiring minimal integration with existing systems. The software automatically manages password generation and synchronization without requiring complex deployment procedures or specialized hardware integration, thereby reducing both integration and deployment complexity.
4Reliability
If biometric authentication is used, then security and user convenience are improved, but cost and privacy concerns increase
Solution Approach 1:
The patent uses inexpensive, disposable-style authentication through software-based password generation rather than expensive biometric hardware. The dynamic passwords are ephemeral and can be regenerated indefinitely at minimal cost, providing a cost-effective alternative to expensive biometric systems while maintaining strong security through frequent credential rotation.
Data Source
AI summary
A device for identification and authentication of a remote user connecting to a service over a network includes a cryptographic processor and at least one cryptographic key and storage means, additional processing means and interface means to generate and transmit a unique authentication code as emulated keystrokes through a standard input, means of a client terminal. The code may be transmitted only by an explicit command of the user.