Email Server Authentication Using Trusted Device Security Tests
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing email sending and receiving protocols are insecure, particularly due to the age of the technology and reliance on easily guessable usernames and passwords, leading to potential malicious emails and unauthorized access.
Innovation Solution
Implementing a double authentication method that includes a security test using a trusted device associated with the user, such as a mobile phone or USB stick, to verify biometric data or other security parameters during the email sending and receiving process via a secure channel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional username and password authentication is used for email services, then ease of operation is improved, but security is worsened due to easily guessable credentials
Solution Approach 1:
The authentication process is segmented into two distinct phases: initial username/password authentication and a second biometric verification phase. This segmentation allows the system to maintain ease of initial access while adding a layer of security that prevents unauthorized use, directly resolving the contradiction between operational ease and security.
Solution Approach 2:
Biometric data is collected and stored in advance during the account setup phase, before actual email sending occurs. This preliminary action enables rapid verification during the email sending process without adding significant operational burden, while ensuring security through unforgeable biometric credentials.
2Reliability
If double authentication with security tests is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The server acts as an intermediary that manages the complex authentication logic, receiving biometric data from the user's device and verifying it against stored templates. This intermediary approach allows the security enhancement to be implemented on the server side without significantly increasing the complexity of the user's email client device.
Solution Approach 2:
The system creates and stores a digital copy of the user's biometric data during account setup, then uses this copy for verification purposes. This copying approach simplifies the verification process by comparing biometric inputs against pre-stored templates rather than requiring complex real-time analysis, reducing device complexity while maintaining security.
3Reliability
If biometric verification is added to the email sending process, then security is improved, but loss of time is worsened due to additional authentication steps
Solution Approach 1:
Biometric data is collected and processed in advance during account setup, creating ready-to-use verification templates. This preliminary action eliminates the need for complex real-time biometric analysis during email sending, reducing the time penalty of the additional authentication step to merely the time required to capture and compare biometric data.
Solution Approach 2:
The system performs only the essential biometric verification step during email sending without requiring additional manual interventions or complex verification procedures. By implementing partial automation of the authentication process, the system minimizes the time loss while achieving the security objective.
Data Source
AI summary
A method of securely sending (200a) an electronic mail, with the method (200a) comprising: receiving, at an electronic mail server (102) a request from a user to send the electronic mail, with the user having an electronic mail account on the electronic mail server (102), and the user having previously identified himself to the electronic mail account; in response to receiving the request, the server (102) sending a security test to be completed by the user to a trusted apparatus (104) associated with the user via a secure channel; the server (102) receiving the security test completed by the user via the secure channel; server (102) validating the security test completed by the user; and server (102) sending the electronic mail if the test is validated by the user.