Full-Duplex Password-less Authentication Visual Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication systems are vulnerable to cyber intrusions and rely heavily on passwords, which are often forgotten, stolen, or compromised, leading to security risks and user inconvenience.
Innovation Solution
A full-duplex password-less authentication system that uses one-time passwords displayed as a combination of pictures and alphanumeric codes on a client device, with visual confirmation and web-push notifications, eliminating the need for mobile devices and enhancing security through public key cryptography.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password-based authentication is used, then user identity verification is achieved, but security vulnerabilities increase and user convenience decreases
Solution Approach 1:
The patent extracts the password element from the authentication process entirely, replacing it with device-based cryptographic verification. The authentication system removes passwords as the primary credential, using instead public-key cryptography where the user's device proves identity without exposing secret credentials that users must manage.
Solution Approach 2:
The patent replaces the mechanical/password-based authentication system with a cryptographic system using public-key infrastructure. Instead of users manually entering and managing passwords, the system uses cryptographic key pairs where the private key remains securely on the user's device and the public key is used for verification, eliminating the need for password memorization and entry.
2Reliability
If second factor authentication is implemented, then security is enhanced, but authentication speed decreases
Solution Approach 1:
The patent merges the first and second factor authentication into a single unified process. The device's cryptographic capabilities combine something the user has (the authenticated device itself) with something the user knows (implicit authorization through device possession), eliminating the need for separate sequential authentication steps and reducing overall authentication time.
3Reliability
If visual confirmation with pictures and codes is used, then password security is eliminated, but system complexity increases
Solution Approach 1:
The patent uses visual representations (pictures and codes) as cryptographic artifacts that can be displayed and verified. The system generates visual proofs of authentication that users can see and confirm, replacing invisible password transmission with visible cryptographic evidence that maintains security while improving user understanding and verification.
Data Source
AI summary
A browser-based full-duplex password-less authentication system provides secure access to third-party services without requiring password entry. Upon attempting to access a service, an access server generates a visual representation and at the browser, a one-time password is converted into a second visual representation, both have an image and alphanumeric characters and are displayed simultaneously on a display of a client device. The user compares the first and second visual representations and confirms that they match. Security is maintained through Transport Layer Security (TLS) with specific cipher suite requirements, digital certificates, and protection against man-in-the-middle attacks. This approach eliminates password management burdens while providing strong security through visual verification and cryptographic protections, all within the user's browser environment.