User Authentication via Dynamic Pattern Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user verification methods face challenges in preventing illegitimate access to systems, particularly due to password management issues and the vulnerability of traditional methods when terminal devices are compromised or stolen, leading to security risks.
Innovation Solution
A user verification method and system that utilizes a password derivation pattern pre-registered on a verification server, generating a presented pattern for the user to input a corresponding character string, which is then verified against the registered pattern, ensuring secure access without exposing actual passwords, even if they are leaked.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional user verification methods are used, then system access is enabled, but security is compromised when passwords are leaked or terminal devices are stolen
Solution Approach 1:
The patent divides the password verification process into two separate components: a public random number table that can be freely distributed and a private key that remains secret. This segmentation ensures that even if the random number table is leaked, the security is not compromised since the private key is never transmitted or stored in accessible locations.
Solution Approach 2:
The patent introduces a random number table as an intermediary element between the user and the verification system. The random number table serves as a mediator that transforms the private key into a verifiable output without exposing the private key itself, thereby enabling secure verification without direct transmission of sensitive credentials.
2Reliability
If multiple passwords are managed for different systems, then access control is improved, but user burden and complexity increase
Solution Approach 1:
The patent creates a universal verification mechanism where a single random number table and private key combination can be used across multiple different systems. The verification process remains consistent regardless of which specific system is being accessed, eliminating the need for users to manage separate passwords for each system while maintaining secure access control.
3Ease of operation
If simple passwords are used for ease of memory, then ease of operation is improved, but security is significantly weakened
Solution Approach 1:
The patent enables the system to automatically generate and manage the complex verification parameters (random number table and private key) without requiring users to create, remember, or manage complex passwords. The system performs the security-critical operations autonomously, allowing users to simply input their identification information while maintaining high security through automated cryptographic processing.
Data Source
AI summary
The present invention is a user verification method and a user verification system, in which a password derivation pattern for each user is pre-registered into a verification server, and when a user is to use the system, the verification server generates a presented pattern and presents this to the user, the user inputs a password corresponding to the user's own password derivation pattern for the presented pattern, the verification server performs verification of the inputted password based on the presented pattern and the user's own password derivation pattern that was registered, and a verification result is then notified to the usage target system.