Dynamic TUID Authentication for Anti-Impersonation Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication technologies allow for long-term impersonation and fraud due to the static nature of user parameters and secret keys, which can be easily obtained by malicious third parties, compromising security.
Innovation Solution
A communication system that generates multiple pieces of information dynamically for transforming and inversely transforming temporary user IDs (TUIDs) using a pair of salts, ensuring that these IDs are not transmitted over the network in plain form, and are updated each time a user logs in.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If user parameters or secret keys are transmitted or stored for authentication, then user convenience is improved, but security deteriorates because malicious third parties can easily acquire them and commit long-term fraud
Solution Approach 1:
The patent applies dynamics by transforming static authentication parameters into dynamic temporary user IDs (TUIDs) that are generated anew for each authentication session. The TUID is created by transforming the original user ID using a salt value, and both the TUID and salt are invalidated after use. This dynamic approach ensures that even if a TUID is intercepted, it cannot be reused for long-term fraud, thus resolving the security issue while maintaining user convenience through automated generation.
Solution Approach 2:
The patent changes the parameter state by introducing temporary user IDs that differ from the original static user ID. The transformation process uses a salt value to generate a different parameter (TUID) for each authentication attempt. This parameter change ensures that the authentication credential is not reusable, preventing long-term impersonation while still providing ease of operation through automatic transformation.
2Ease of operation
If static user IDs are used for authentication, then ease of operation is improved, but security deteriorates because the same ID can be used for long-term impersonation
Solution Approach 1:
The patent transforms the static user ID into a dynamic temporary user ID (TUID) that changes with each authentication session. The TUID is generated by transforming the original user ID using a salt value, and both are invalidated after use. This dynamic transformation eliminates the possibility of long-term impersonation while maintaining ease of operation through automated generation and validation.
Solution Approach 2:
The patent creates disposable temporary user IDs that are valid for only one authentication session. Each TUID is generated, used once for authentication, and then invalidated. This disposable approach ensures that even if a TUID is compromised, it cannot be reused for impersonation, thus eliminating long-term security risks while maintaining operational ease.
Data Source
AI summary
A communication system, comprising: a first device; and a second device; wherein the communication system is configured to generate a plurality of pieces of information based on a request received from the first device, wherein the first device is configured to transform original data based on the plurality of pieces of information and transit transformed data obtained as a result of the transformation to the second device, and wherein the second device is configured to inversely transform the transformed data based on the plurality of pieces of information to acquire to original data.