Authentication System Using Dynamic Passcodes and Mobile Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication systems require multiple usernames and passwords for different websites, leading to vulnerabilities such as password breaches and insecure registration processes, with users often reusing passwords, making them easier targets for identity thieves, and existing solutions like LastPass and OpenID do not provide sufficient security or convenience.
Innovation Solution
A comprehensive authentication and identity system that uses a mobile communication number for verification, sending a verification message to the user's mobile device, which must be confirmed to secure the registration and login processes, allowing users to manage their personal and financial information securely across multiple websites.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate usernames and passwords are used for each website, then security is improved, but ease of operation deteriorates due to the need to remember multiple credentials
Solution Approach 1:
The system segments authentication into two independent components: a username that can be reused across websites, and a dynamic passcode that is generated separately for each website and changes over time. This segmentation allows the username to provide consistent identification while the passcode provides site-specific, time-varying security, reducing the burden of remembering multiple passwords while maintaining strong security.
Solution Approach 2:
The passcode is designed to be dynamic rather than static, changing based on the website being accessed and potentially over time. This dynamic nature means that even if one website's passcode is compromised, it does not compromise access to other websites, and the system automatically invalidates stolen credentials without requiring user intervention to change passwords.
2Ease of operation
If the same username and password are reused across websites, then ease of operation is improved, but security deteriorates due to breach propagation
Solution Approach 1:
The authentication system segments the credential into a reusable username component and a website-specific dynamic passcode component. This allows users to conveniently use the same username across multiple websites while the dynamic passcode ensures that each website has its own independent security layer, preventing breach propagation.
Solution Approach 2:
The passcode parameter changes dynamically based on the website context and time, transforming a static password into a dynamic credential. This parameter change ensures that credentials are not reusable across different websites or time periods, eliminating the security risk of password reuse while maintaining user convenience.
3Ease of operation
If passwords are stored in encrypted vaults or auto-fill tools, then ease of operation is improved, but security deteriorates due to single point of failure
Solution Approach 1:
The system extracts the password management function entirely, eliminating the need for encrypted vaults or auto-fill tools. Instead of storing passwords to be retrieved later, the system generates dynamic passcodes on-demand at the point of authentication, removing the single point of failure that represents the stored password database.
Solution Approach 2:
The system introduces a server-based intermediary that generates and manages dynamic passcodes, acting as a mediator between the user and websites. This intermediary distributes the security function across multiple servers rather than relying on a single local vault, providing redundancy and eliminating the single point of failure inherent in local password storage solutions.
4Loss of information
If traditional registration processes are used, then completeness of information collection is improved, but time consumption deteriorates due to manual entry requirements
Solution Approach 1:
The system performs preliminary actions by automatically populating registration forms with the user's username and dynamically generated passcode before the user needs to submit them. This preliminary population of fields eliminates the need for manual entry of sensitive information while ensuring all required fields are complete, reducing both time consumption and the risk of information loss.
Data Source
AI summary
A comprehensive authentication and identity system and method are disclosed. A central profile is created for a user which includes user information that can be passed back or otherwise utilized by websites (e.g. for registrations, logins, etc.) The user information may include the user's username, password, contact information, personal information, marketing preferences, financial information, etc. For website registrations, the user may provide a mobile communication number that is utilized to perform a type of mobile communication device verification process. As part of a website login, the user may provide identifiable information (e.g. a username) that is looked up by the system or website to determine a mobile communication number for the user, which is used for a verification process. If the verification process is completed successfully, the user may be logged into the website. For accessing the system directly, a user may go through a mobile communication device verification process.