Dynamic User Formula Authentication System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication systems are vulnerable to dictionary attacks, brute force attempts, traffic monitoring, shoulder surfing, and keylogging due to their reliance on static passwords and secret keys, which can be compromised.
Innovation Solution
A user authentication method using a dynamic user formula with variables and operations, where users enter a calculated result based on randomly assigned values, and the system independently verifies this result, incorporating additional security features like decoy characters and customizable operators to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If passwords are made longer and more complicated to resist dictionary attacks and brute force attempts, then security against attacks is improved, but ease of operation deteriorates as users easily forget complicated passwords
Solution Approach 1:
The patent implements dynamic passwords that change over time or with each authentication session, rather than static passwords. The system generates passwords based on time stamps, random values, or user-specific algorithms, making each password unique and temporary. This resolves the contradiction by providing strong security through complexity while improving ease of operation through automated generation and management of these dynamic credentials.
Solution Approach 2:
The system enables users to generate and manage their own passwords through client-side algorithms and stored secrets. Users can recreate passwords locally without requiring server intervention or memorization of complex strings. This self-service capability maintains high security through cryptographic methods while significantly improving ease of operation by eliminating the burden of remembering complicated passwords.
2Reliability
If one time passwords are used to prevent password reuse attacks, then security against replay attacks is improved, but device complexity deteriorates due to the need for physical OTP generators or synchronized devices
Solution Approach 1:
The patent implements a software-based OTP generation system that replicates the functionality of physical OTP devices through virtual copies. The client application on users' devices generates and manages OTP credentials locally, eliminating the need for physical hardware tokens. This approach maintains the security benefits of one-time passwords while dramatically reducing device complexity by using software instead of physical devices.
Solution Approach 2:
The system creates a universal OTP generation mechanism that works across multiple platforms and devices through standardized algorithms and protocols. The same client application can function on different operating systems and device types, providing OTP capability without requiring device-specific hardware. This multi-functionality reduces overall system complexity while maintaining strong replay attack protection.
3Reliability
If secret keys are embedded in OTP generators and stored on servers to ensure unique authentication outcomes, then reliability of authentication is improved, but vulnerability to key compromise and brute force attacks increases
Solution Approach 1:
The patent divides the authentication secret into multiple segments or factors that are distributed between the client and server. Instead of storing a single comprehensive secret key on the server, the system uses segmented credentials where the client holds certain secret components and the server holds others. This segmentation reduces the vulnerability of each individual key component while maintaining authentication reliability through the combination of multiple secret segments.
Solution Approach 2:
The system dynamically changes authentication parameters such as time stamps, random nonces, and session-specific values in the authentication equation. These parameter changes ensure that even if a secret key is compromised, the attacker cannot reuse it effectively because the authentication result depends on continuously changing parameters. This approach maintains reliable authentication while reducing vulnerability to key compromise through parameter variability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of authenticating a user for access includes creating an authentication key in the form of a user formula selected from a set of variables and operations provided by the authentication system, storing the user formula in the authentication system, utilizing a display to present the user with an arrangement of variables generated by the authentication system including the variables of the user formula, each assigned a value, applying the assigned values to matching variables in the user formula and calculating a first result, interspersing one or more additional characters among the characters of the first result, and conveying the first result with the additional characters to the authentication system. The authentication system authenticates the user if the number of additional characters conveyed with the first result is below a predetermined threshold and the first result matches a second result of a separate and independent calculation of the user formula by the authentication system.