Dynamic Interactive Identity Authentication System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity authentication methods are vulnerable to attacks due to their static nature, making them susceptible to theft and social engineering, as they rely on static authentication information that can be easily compromised.
Innovation Solution
A dynamic interactive identity authentication method and system that generates multiple display character sets, including valid and interference sets, to create a dynamic inputting code for comparison with the user password, enhancing security by randomizing the input process and making it difficult for attackers to determine valid characters.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static authentication information is used, then the authentication process is simple and fast, but the system becomes vulnerable to theft and social engineering attacks
Solution Approach 1:
The patent applies dynamics by transforming static authentication information into dynamic elements. The system generates random numbers and dynamically changes authentication codes during the authentication process, making the authentication information changeable rather than fixed. This dynamic approach prevents attackers from using stolen static data for repeated attacks, as each authentication session uses freshly generated dynamic values.
Solution Approach 2:
The patent implements parameter changes by modifying the authentication parameters during the authentication process. Random numbers are generated and authentication codes are dynamically adjusted based on the random numbers and user input. This changes the authentication parameters from static to dynamic, increasing security while maintaining a relatively simple user interface through automated parameter transformation.
2Ease of operation
If all authentication information is made public or easily accessible, then the authentication process is convenient, but the system becomes susceptible to complete compromise
Solution Approach 1:
The patent applies the extraction principle by separating the authentication process into distinct components: user input, random numbers generated by the system, and authentication codes. Only necessary authentication information is extracted and used temporarily during the authentication process, while the random numbers and authentication codes are not stored or made permanently accessible. This limits the impact of any single compromise.
Solution Approach 2:
The patent implements beforehand cushioning by generating random numbers and authentication codes in advance that can be used once and then discarded. The random numbers are generated before the authentication process and used to create authentication codes that change with each use. This cushioning approach ensures that even if authentication information is exposed, it cannot be reused, providing forward security.
3Measurement precision
If authentication information is made unique and permanent, then identification accuracy is high, but the system becomes vulnerable to targeted attacks
Solution Approach 1:
The patent applies periodic action by regenerating authentication codes and random numbers for each authentication session. Rather than using a single permanent authentication code, the system periodically generates new authentication information based on random numbers and user input. This periodic regeneration maintains identification accuracy while making the system resistant to targeted attacks, as each session uses fresh authentication data.
Solution Approach 2:
The patent implements preliminary action by generating random numbers and authentication codes before the actual authentication verification. The random numbers are prepared in advance and used to create authentication codes that will be verified during the authentication process. This preliminary generation of authentication information ensures that the verification process uses secure, dynamically generated values rather than static data.
Data Source
AI summary
An identity authentication system includes a storage unit, a display character set generation unit, a display unit and a password authentication unit. An identity authentication method includes the following steps: generating the dynamic display character sets; inputting a dynamic input code; and comparing the dynamic input code with the user password. This invention can improve the security of identity authentication and is convenient to use.