Dynamic Password Authentication for Offline Equipment Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for vast pools of equipment, such as telecommunications networks, face security risks due to the use of single passwords and are impractical for distributed environments without reliable network access, as OTP systems are ineffective in such scenarios.
Innovation Solution
A method where a device computes a unique password from a secret datum, which is updated over time, allowing authentication without memorization, and includes mechanisms to handle network failures by iteratively computing with past secret datum values.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single password is given to all equipment for practicality, then technicians only have to memorize a single password, but this presents a clear security risk as hackers can access all equipment
Solution Approach 1:
The system segments the authentication approach by introducing multiple administration accounts (first account with first password, second account with second password) instead of using a single password for all equipment. Each account has specific access rights, dividing the authentication system into separate security zones.
Solution Approach 2:
Different passwords are assigned to different administration accounts with different access rights. The first password provides full access while the second password provides limited access, creating local quality variations in security levels across different authentication scenarios.
2Reliability
If diverse passwords are distributed to each equipment for security, then security risk is reduced, but technicians must memorize multiple passwords which is impractical
Solution Approach 1:
The device serves as an intermediary that stores multiple passwords and automatically selects and transmits the appropriate password to the equipment. This mediator handles the complexity of multiple passwords, freeing technicians from memorization requirements while maintaining security.
Solution Approach 2:
The device autonomously manages the password selection process by receiving identification information from the equipment, determining which password to use based on pre-stored associations, and automatically transmitting the correct password without requiring technician intervention or memorization.
3Reliability
If OTP system is used to distribute diverse passwords, then security is improved, but it requires network connection for synchronization which is unavailable during network failures
Solution Approach 1:
The device pre-stores multiple passwords and their associations with equipment identification information before network failures occur. This preliminary preparation allows the device to function autonomously during network outages, selecting and transmitting appropriate passwords without requiring real-time network synchronization.
Data Source
AI summary
A management method for authenticating a user of a device on an equipment item that is accessed by password. The method includes: acquiring a first password by the equipment item, the password being a result of a calculation based on a first secret data item; access by the user to the equipment item, which includes: the equipment item receiving a second password which is calculated by the device based on a second secret data item; and authenticating the user of the device on the equipment item if the second password received during the receiving corresponds to the first password obtained during the acquisition.