Identity-Based Elliptic Curve OTP Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional user authentication methods, such as security questions and RSA cryptosystems, are cumbersome, vulnerable to attacks, and require costly infrastructure for secure key storage, while existing identity-based authentication systems face challenges with collision attacks due to hashing techniques.
Innovation Solution
Implementing identity-based elliptic curve cryptography to dynamically generate private keys on a security device, eliminating the need for storing private keys with the authentication server and reducing infrastructure costs, using a private key generator to compute authentication codes based on user IDs and timestamps.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hashing technique is used to generate OTP, then authentication can be performed, but the system becomes vulnerable to collision attacks
Solution Approach 1:
The patent changes the fundamental parameter of OTP generation from hashing-based to elliptic curve cryptography-based. Instead of using hash functions that are vulnerable to collision attacks, the system uses elliptic curve mathematical operations which provide security based on the discrete logarithm problem, fundamentally changing the cryptographic parameter space to eliminate collision attack vectors.
Solution Approach 2:
The patent substitutes the hashing mechanism with an identity-based elliptic curve cryptography mechanism. The private key generator uses elliptic curve point multiplication and scalar operations instead of hash functions, replacing the mechanical hashing process with a mathematically stronger cryptographic primitive that resists collision attacks.
2Reliability
If private keys are stored with authentication server, then authentication can be performed, but infrastructure cost and security risk increase
Solution Approach 1:
The patent extracts the private key storage function from the authentication server entirely. Using identity-based cryptography, the private key is generated locally on the user's device from their public key identity, eliminating the need to store private keys on the server. This extracts the security-critical private key management function from the centralized infrastructure.
Solution Approach 2:
The user's device performs self-service by generating its own private key locally using the private key generator and the user's public key identity. The device autonomously creates and manages its own cryptographic credentials without requiring external key distribution or storage infrastructure, making the system more decentralized and cost-effective.
3Reliability
If conventional authentication methods are used, then user verification can be performed, but computational time and complexity increase
Solution Approach 1:
The patent changes the cryptographic parameter space from conventional public key infrastructure to identity-based elliptic curve cryptography. The use of elliptic curves provides equivalent security with smaller key sizes and faster computational operations, reducing the time required for authentication while maintaining or improving security levels.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Method and system for user authentication are described. The method comprises receiving an authentication code from an application server (108) seeking authentication of the user. Further, a private key of the user is computed in real time based on a user identity (ID) of the user and a master secret key of the PKG. The method further comprises, ascertaining a verification code based on the private key of the user and a verification timestamp, wherein the verification timestamp indicates a time at which the ascertaining of the verification code was initiated. Further, the authentication code is compared with the verification code. Further, the method comprises authenticating the user based on the comparison.