Dynamic Authentication Code Updates for Anti-Spoofing Reliability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional one-time password systems face challenges in enhancing authentication reliability due to long expiration dates, making it difficult to improve the security of the authentication process.
Innovation Solution
Implementing a system where authentication codes are updated at a cycle significantly shorter than the expiration date, using real-time expiration dates and two-dimensional codes that are generated and updated frequently on the user's device, reducing the need for communication with the authentication server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the one time password is set with a long expiration date, then the usability and convenience of authentication is improved, but the reliability and security of the authentication process deteriorates
Solution Approach 1:
The patent divides the authentication validity period into two separate time parameters: a long expiration date for the one time password (providing usability) and a short real-time expiration date for the authentication code (providing security). This segmentation allows each parameter to serve its specific function independently, resolving the contradiction between convenience and security.
Solution Approach 2:
The patent introduces a dynamic real-time expiration date that changes frequently (every few seconds) while the main one time password maintains a long fixed expiration date. This dynamic adjustment of the code's validity period allows the system to maintain high security without compromising the user-friendly long expiration of the password itself.
2Reliability
If the authentication code is updated frequently with a short cycle, then the reliability and anti-spoofing capability is improved, but the device complexity and processing requirements increase
Solution Approach 1:
The authentication code is generated and updated automatically by the terminal device itself without requiring constant communication with the authentication server. The device uses its own clock to determine the real-time expiration date and generates codes independently, reducing system complexity while maintaining high reliability.
Solution Approach 2:
The patent implements periodic generation of authentication codes with a short cycle (every few seconds), creating multiple codes with different real-time expiration dates. This periodic action ensures that even if one code is compromised, other codes remain valid, thereby maintaining authentication reliability without requiring complex continuous verification systems.
3Reliability
If the authentication code has a short real-time expiration date, then the security against spoofing is improved, but the communication time and processing delay increase
Solution Approach 1:
The terminal device pre-generates multiple authentication codes with different real-time expiration dates before the authentication process begins. This preliminary action ensures that when authentication is needed, valid codes are already available, eliminating the need for time-consuming real-time code generation and reducing processing delays while maintaining short expiration for security.
Data Source
AI summary
An information processing device intended to effectively improve the reliability of an authentication process, including: an authentication information acquisition circuit acquiring authentication information; and a code update circuit updating an authentication code readable from the outside or transmittable to the outside for each predetermined cycle, on the basis of the authentication information acquired by the authentication information acquisition circuit, and time information changed in an update cycle shorter than or equal to the predetermined cycle. The predetermined cycle may preferably be 1 second or shorter. In addition, the authentication information acquisition circuit may preferably acquire the authentication information from an external server in the form of a one-time token including a first expiration date with a first length.