Dynamic PIN Authentication via Client-Side Data Derivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional PIN-based authentication is inconvenient and prone to security risks due to the need for manual registration and remembering multiple PINs, which can be forgotten or stolen, leading to increased security threats when a single PIN is used across multiple websites.
Innovation Solution
An improved PIN-based authentication method automatically generates a PIN based on user-specific authentication information provided by the server to the client machine, eliminating the need for manual registration and memory, and enhancing security by distributing redundant information across different locations on the client machine.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual PIN registration is used, then authentication security is maintained, but user convenience deteriorates due to time-consuming registration and memory requirements
Solution Approach 1:
The system automatically generates PINs using user-specific authentication information stored on the client machine, eliminating the need for manual PIN registration and remembering. The authentication process serves itself by deriving PINs from existing user data, improving convenience while maintaining security.
Solution Approach 2:
User-specific authentication information is collected and stored on the client machine in advance during initial system setup. This preliminary action enables automatic PIN generation during authentication without requiring users to manually register PINs each time, resolving the contradiction between security and convenience.
2Ease of operation
If a single PIN is used across multiple websites, then ease of operation improves by avoiding multiple PINs, but security deteriorates due to increased risk of PIN theft and broader impact of theft
Solution Approach 1:
The authentication information is segmented into user-specific data stored on individual client machines. Each user's PIN is derived from their own unique authentication information stored locally, rather than using a single shared PIN across multiple systems. This segmentation maintains ease of operation while improving security through isolation.
Solution Approach 2:
Each client machine has its own local copy of user-specific authentication information, creating a localized authentication system. The PIN generation is tailored to each specific user-machine combination, providing customized security for each location rather than a uniform approach that increases risk.
3Ease of manufacture
If PINs are manually registered and stored, then authentication functionality is provided, but loss of information occurs when PINs are forgotten or stolen
Solution Approach 1:
The system creates and stores a copy of user-specific authentication information on the client machine itself. This local copy serves as a backup that enables automatic PIN generation without relying on users to remember manually registered PINs, preventing information loss while maintaining easy setup.
Solution Approach 2:
Authentication information is preliminarily stored on the client machine before authentication is needed. This advance preparation ensures that the information is readily available and protected from being forgotten, eliminating the need for users to manually remember PINs while maintaining simple authentication setup.
Data Source
AI summary
An improved PIN-based authentication technique for authenticating the user of a client machine to a server automatically generates a personal identification number (PIN) for the user based on user-specific authentication information, such as encrypted cookie information. The server provides user-specific authentication information to a client machine. When the user submits an authentication request, user-specific authentication information is collected and uploaded to the server. The user-specific authentication information is processed to form a PIN, and authentication of the user proceeds based on the PIN and any other authentication factors provided. Since the disclosed techniques compute PINs automatically based on information exchanged between a client machine and a server, the user is relieved of any burden associated with registering and remembering a PIN.