Hardware-Based Digital DNA Authentication via Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital authentication methods are insecure, particularly for internet access, as they expose sensitive 'digital DNA' information, making it vulnerable to interception and identity theft, and require complex installations or password memorization, which is not suitable for public internet use.
Innovation Solution
A reinforced authentication process that collects data from hardware components, generates a unique 'digital DNA' through hashing, and uses a One Time Password (OTP) mechanism, allowing users to select their authentication tokens and protect sensitive information, without requiring password memorization or complex software installations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional identifier-password authentication is used, then ease of operation is improved, but security is worsened due to vulnerability to interception and identity theft
Solution Approach 1:
The patent introduces a trusted third-party authentication server as an intermediary between user and service provider. This server issues digital certificates that mediate the authentication process, allowing users to authenticate securely without directly sharing passwords with service providers, thus resolving the contradiction between ease of operation and security
Solution Approach 2:
The patent creates a digital copy of the user's identity in the form of a digital certificate issued by the authentication server. This certificate copy can be presented to multiple service providers without exposing the original password, enabling easy authentication while maintaining security through the unforgeable digital copy
2Reliability
If strong authentication techniques (hardware elements, biometric data) are implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent replaces physical hardware authentication elements and biometric systems with a software-based digital certificate system. Instead of requiring users to carry hardware tokens or undergo biometric scanning, the system uses digitally signed certificates that can be stored and presented software-based, reducing device complexity while maintaining security
Solution Approach 2:
The patent creates a universal authentication mechanism where a single digital certificate can be used across multiple service providers and applications. This multi-functional certificate replaces the need for separate hardware elements or biometric systems for each service, reducing overall system complexity while providing consistent security
3Reliability
If digital DNA information is collected and transmitted, then authentication reliability is improved, but loss of information is worsened due to exposure of sensitive data
Solution Approach 1:
The patent extracts only the necessary authentication elements from the user's digital DNA and incorporates them into a signed certificate issued by the authentication server. The full digital DNA remains on the user's system and is never transmitted, while the extracted elements in the certificate provide sufficient authentication information without exposing sensitive data
Solution Approach 2:
The patent applies digital signatures and cryptographic protection to the authentication data before transmission. This preliminary security action protects the digital DNA information from interception and misuse, allowing reliable authentication while preventing information loss through exposure
Data Source
AI summary
A Process of reinforced authentication based on data collection of hardware components contained in a system having steps of enrolment authentication. A web site is connected to and a web page received. A list of hardware components is detected and collected. A subset of the list constituting digital information of reference (DDNA) is generated by a hash operation applied to the raw data. The DDNA is used with a received seed of an authentication server to generate a unique use password (OTP).