Habit-Based OTP Generation for Authentication Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods, such as One-Time-Password (OTP), are vulnerable to theft when directly transmitted to user devices, and combining OTP with biological information is complex and costly, requiring extensive hardware.
Innovation Solution
A high-safety user multi-authentication system that generates real and bait keys based on user habit information, using a server and user application unit to provide OTPs only when the device is operated according to registered habits, enhancing security without increasing costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If OTP is directly transmitted to user device, then authentication can be performed, but security is compromised as OTP may be stolen by illegal users
Solution Approach 1:
The patent introduces an intermediary mechanism where OTP is not directly transmitted to the user device but is instead generated based on user habit information that the user performs. This intermediary step (user action-based generation) prevents direct transmission theft while maintaining authentication functionality
Solution Approach 2:
The system enables self-service authentication where the user's own habitual actions serve as the basis for OTP generation. The user's device operations themselves generate the authentication credentials, eliminating the need for external transmission and giving the user control over the authentication process
2Reliability
If OTP is combined with user biological information, then authentication security is improved, but implementation becomes complicated and costs increase
Solution Approach 1:
The patent replaces complex biological information collection systems (fingerprint sensors, retina scanners, voice recognition hardware) with a software-based habit tracking mechanism that monitors and analyzes user device operations. This substitution maintains security while dramatically reducing implementation complexity and hardware requirements
Solution Approach 2:
Instead of using unique biological traits that require specialized hardware to capture, the system copies and analyzes patterns of user behavior (habits) that are naturally observable through device usage. This creates a functional equivalent to biological authentication without the hardware overhead
3Reliability
If hardware-based OTP is used, then authentication security is improved, but a great number of hardware devices are required at user end, resulting in inconvenience of usage
Solution Approach 1:
The patent creates a universal authentication method that works across different device types and platforms without requiring specialized hardware. The habit-based OTP generation can be implemented in any software environment, making the system universally applicable and eliminating hardware-related convenience issues
Solution Approach 2:
The patent extracts the authentication security function from physical hardware and embeds it in software that utilizes user behavior patterns. This extraction eliminates the need for separate hardware tokens or devices while maintaining the security function, allowing authentication to occur within the existing device ecosystem
Data Source
AI summary
A high-safety user multi-authentication system, comprising: a server having a user habit information and a key generator for generating a real key corresponding to the user habit information and at least one bait key; and a user application unit disposed on a communication device having a user interface, a key receiving unit for receiving the real key and the at least one bait key from the server, an OTP (one time password) generator for generating a real OTP based on the real key and at least one bait OTP based on the at least one bait key; wherein the real OTP is provided to the user interface when the communication device is operated according to the user habit information.