Dynamic Signature Authentication for Mobile Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face challenges in securely communicating data to mobile devices, as they often use various networks in different locations, making it difficult to ensure secure access and data management compared to fixed devices.
Innovation Solution
A method and system that involves communicating a request for an electronic token (eToken) to a first server, along with a signature key and server time, to determine a signature, which is then used to securely request and receive data from a second server, ensuring secure access and data communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If mobile devices use various networks in different locations to communicate, then communication flexibility and device mobility are improved, but security and data management become more difficult
Solution Approach 1:
The system changes the parameter of authentication from static device-based authentication to dynamic signature-based authentication that varies with each request. The signature is generated using a signature key and timestamp, creating a unique authentication parameter for each data request that adapts to different networks and locations while maintaining security
Solution Approach 2:
The system performs preliminary authentication by obtaining an electronic token (eToken) and signature key before actual data communication. This preliminary action establishes security credentials in advance, allowing the mobile device to securely communicate across multiple networks without requiring re-authentication at each location
2Reliability
If signature-based authentication is implemented for mobile devices, then security and data management are improved, but system complexity increases
Solution Approach 1:
The system introduces an intermediary authentication server that manages the complexity of signature-based authentication. The server handles eToken issuance, signature key distribution, and signature verification, relieving the mobile device of complex security management while maintaining high security standards
Solution Approach 2:
The system uses cryptographic copying where the signature key and eToken are distributed to authorized devices. These cryptographic copies enable secure authentication without requiring the master authentication system to be present at each communication point, simplifying the overall system architecture
Data Source
AI summary
A method and system for communicating between a user network device and a server includes a first server and a user network device that requests an electronic token (eToken) from the first server. The first server communicates the eToken, a signature key, and a server time. The user network device determines a signature using the server time and signature key and communicates a request for data to a second server. The request for data includes a signature. The second server communicates data to a user network device.