Dynamic Digit Code Authentication for Password Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data communication systems face security risks due to the static nature of passwords, which can be easily decrypted by hackers, leading to unauthorized access and potential asset theft.
Innovation Solution
A data communication method and system that generates digit codes based on a preset rule, requiring users to input corresponding data each time, thereby changing the required input and increasing password security by reducing the risk of password decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a static password is used for authentication, then the authentication process is simple and easy to operate, but the password can be easily decrypted by hackers through continuous login requests with different passwords
Solution Approach 1:
The patent applies dynamics by transforming the static password into a dynamic verification code that changes with each authentication attempt. The server generates a new verification code each time and compares it with the user's input, ensuring that even if hackers capture one verification code, it becomes invalid immediately. This dynamic approach resolves the contradiction by maintaining ease of operation while significantly improving password security through time-sensitive, one-time-use codes.
Solution Approach 2:
The patent applies parameter changes by modifying the verification code's temporal parameter - each code is valid only for a specific authentication session and expires immediately after use. The server generates verification codes with changing parameters (different codes for different sessions), preventing hackers from using captured codes for multiple attempts. This parameter change strategy maintains simple authentication operation while eliminating the security vulnerability of reusable static passwords.
2Ease of operation
If the user inputs a complete account number and password each time, then the authentication is straightforward, but the static password allows hackers to decrypt it through continuous traversal with different passwords
Solution Approach 1:
The patent applies the disposable principle by making each verification code a single-use, short-lived authentication credential. Each verification code generated by the server is valid for only one authentication attempt and becomes useless immediately after that session. This disposable approach resolves the contradiction by maintaining straightforward authentication (users still input one code) while eliminating the harmful factor of password decryption through continuous traversal, as each code can only be used once.
3Stability of the object's composition
If the same password is required for each login attempt, then the authentication process is consistent and simple, but the password becomes vulnerable to decryption attacks
Solution Approach 1:
The patent applies periodic action by generating a new verification code for each authentication session rather than reusing the same password. The server periodically creates fresh verification codes that are valid only for their specific session, maintaining authentication consistency (users still follow the same input process) while improving security through code rotation. This periodic generation of unique codes resolves the contradiction between process consistency and password security.
Data Source
AI summary
A client terminal sends a communication request to a server. The server generates at least one digit code according to a first preset rule. The server sends information including the at least one digit code to the client terminal. The client terminal generates at least one input box, a number of which corresponds to a number of the at least one digit code, detects an input event of the at least one input box, and obtains data of the at least input box when the input event occurs. The client terminal sends the data of the at least one input box as at least one verification data to the server. The server compares the digit data corresponding to the at least one digit code with the verification data and sends a successful information code to the client terminal when the two are the same. The techniques improve password security.