Grid Password Authentication with Dynamic Session Subsets
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods face challenges such as password remembrance inconvenience, data loss due to forgotten passwords, and security threats from password interception and attacks like URL sniffing and brute force attacks.
Innovation Solution
A system and method utilizing a multi-dimensional grid password comprising a set of cells with corresponding identifiers, where a policy for each session generates a unique subset of the grid password for authentication, reducing the risk of password attacks by changing the subset during each session.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a traditional password is used for user authentication, then the authentication process is simple and easy to implement, but the system becomes vulnerable to password attacks such as URL sniffing and brute force attacks
Solution Approach 1:
The patent segments the authentication system into multiple components: a multi-dimensional grid password structure divided into multiple cells, each containing multiple values. The system generates multiple policies that select different subsets of cells for each authentication session. This segmentation transforms a single vulnerable password into a distributed grid structure where no single point of failure exists, thereby improving security while maintaining manageable complexity through modular design.
Solution Approach 2:
The patent implements dynamics by making the password subset used for authentication change over time. Each authentication session receives a unique policy that selects a different subset of grid cells. The system dynamically generates new policies and corresponding password subsets for each session, preventing static password vulnerabilities like brute force attacks and URL sniffing, while the automated policy generation keeps operational complexity manageable.
2Object-affected harmful factors
If a multi-dimensional grid password with dynamic policies is implemented, then password attack resistance is improved, but the complexity of password management and authentication process increases
Solution Approach 1:
The authentication system is segmented into distinct functional modules: grid password generation, policy generation, subset selection, and authentication verification. Each module handles a specific aspect of the complex process independently. The grid password itself is segmented into multiple cells with multiple values each, allowing the system to resist password attacks while managing complexity through functional and structural segmentation.
Solution Approach 2:
The system implements self-service through automated policy generation and management. The server automatically generates unique policies for each authentication session, selects appropriate password subsets, and manages the grid password structure without requiring manual intervention. This automation reduces the operational complexity burden on users while maintaining high security against password attacks.
3Measurement precision
If the complete multi-dimensional grid password is transmitted to the client, then authentication accuracy is maintained, but the risk of password interception and data loss increases
Solution Approach 1:
The patent extracts only the necessary subset of password values from the complete multi-dimensional grid password for transmission to the client. Each policy specifies which cells and values should be used for a particular authentication session, and only those extracted values are transmitted. This extraction approach maintains authentication accuracy by using the correct password values while minimizing interception risk by reducing the amount of sensitive data transmitted over the network.
Solution Approach 2:
The system performs preliminary action by pre-generating multiple policies and determining which password subsets will be used for future authentication sessions. The server prepares the authentication credentials in advance, selecting and organizing the appropriate password subsets before transmission. This preliminary organization ensures authentication accuracy is maintained while the selective preparation of subsets minimizes the exposure of the complete password structure.
Data Source
AI summary
A system and a method may be provided for performing user authentication. The system comprises a processor and a memory coupled to the processor. The memory has stored therein instructions executable by the processor to configure the system to generate a multi-dimensional grid password for a user account, transmit the multi-dimensional grid password to a client device associated with the user account, and iteratively generate a policy for each of a plurality of user authentication sessions. The multi-dimensional grid password comprises a set of cells having corresponding one or more identifiers. The policy for each of the plurality of user authentication sessions comprises a unique set of identifiers from the one or more identifiers of each of the set of cells, and a policy for a session from the plurality of user authentication sessions causes to generate a subset of the multi-dimensional grid password for user authentication during the session.