Dynamic User ID Authentication System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer security systems are vulnerable to brute-force and distributed denial-of-service (DDoS) attacks, as malicious actors can attempt to guess user passwords or overwhelm accounts with multiple IP addresses, causing inconvenience to genuine users.
Innovation Solution
A dynamic user ID and session ID system is implemented, where a user's conventional ID is replaced with a dynamic ID after initial login, requiring only a PIN for subsequent logins, and new IDs are generated for each session, making it impossible for attackers to learn the user's ID and reducing the risk of attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If account locking is implemented after multiple failed password attempts, then security against brute-force attacks is improved, but user convenience deteriorates due to denial-of-service for genuine users
Solution Approach 1:
The patent implements dynamic user IDs that change periodically or based on authentication state, making brute-force attacks ineffective while avoiding account locking. The dynamic nature of the identifier means attackers cannot systematically guess credentials, and legitimate users experience no service disruption since the system adapts rather than locks out.
2Reliability
If IP address blacklisting is used to block malicious login attempts, then security against single-source attacks is improved, but effectiveness deteriorates against distributed denial-of-service attacks from multiple IP addresses
Solution Approach 1:
The system employs dynamic user IDs that are not tied to static IP addresses, making the authentication mechanism effective against both single-source and distributed attacks. Since the identifier changes and is not location-dependent, attackers cannot bypass security by using multiple IP addresses, and the system maintains adaptability across different attack scenarios.
Solution Approach 2:
The patent introduces dynamic identifiers as an intermediary between the user and the authentication system, decoupling the authentication mechanism from network location (IP address). This intermediary layer provides security that is independent of the attack source, making the system versatile against various attack types including DDoS.
3Ease of operation
If conventional static user IDs are used, then ease of login is maintained, but security deteriorates as user IDs can be discovered and exploited by attackers
Solution Approach 1:
The system replaces static user IDs with dynamic identifiers that change over time or based on authentication state. This maintains ease of login for legitimate users who receive their current identifier, while preventing attackers from exploiting static IDs through discovery or interception. The dynamic nature ensures each authentication session uses a fresh identifier.
Solution Approach 2:
The patent generates dynamic user IDs that can be thought of as temporary copies or representations of the user's identity for each session. These copied identifiers are distributed to legitimate users while remaining unknown to attackers, providing security without compromising the ease of authentication for authorized users.
Data Source
AI summary
The disclosed subject matter provides authentication between a client device and a server. The server allocates a dynamic user ID contained within an authentication token that is provided to the client device. In response to each successful authentication with the server, a new dynamic user ID is generated and provided to the client device for use in a subsequent authentication session. In generating the new dynamic user ID for the client device, the server invalidates any previously-provided dynamic user IDs for the client device.