Hash-Based Authentication System for Cloud Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing cloud computing authentication systems are not sufficiently secure, particularly when intra-company systems interact with cloud systems, as they rely on terminal IDs as decryption keys, lacking robust security measures when authentication servers are located outside the company.
Innovation Solution
An authentication system that uses a hash function to securely authenticate users by calculating and matching hash values from input login information, ensuring that only authorized access is granted by establishing a session between the authentication server and the service providing server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the authentication server uses terminal ID as decryption key, then authentication processing can be performed, but the intra-company system is not sufficiently secure
Solution Approach 1:
The patent extracts the security-critical authentication logic from the cloud-based authentication server and implements it locally within the intra-company system. By taking out the hash calculation and verification processes from the external authentication server and placing them inside the company's controlled environment, the system eliminates the security vulnerability of using terminal ID as decryption key while maintaining authentication functionality.
Solution Approach 2:
The patent introduces a local authentication module as an intermediary between the terminal and the cloud system. This intermediary component performs hash-based authentication verification locally before allowing access to intra-company resources, thereby mediating between the cloud authentication server and the company's secure internal systems without exposing sensitive authentication mechanisms to external threats.
2Adaptability or versatility
If the authentication server is located outside the company, then cloud computing services can be accessed, but sufficient security cannot be ensured when intra-company systems cooperate with the cloud system
Solution Approach 1:
The patent segments the authentication system into two distinct parts: a cloud-based authentication server that handles service provisioning and a local authentication module within the intra-company system that handles security verification. This segmentation allows the system to access cloud services while maintaining security control locally, resolving the contradiction between cloud adaptability and security reliability.
Solution Approach 2:
The patent implements preliminary authentication verification within the intra-company system before allowing access to cloud resources. By performing hash calculation and verification in advance within the company's secure environment, the system ensures that only authenticated users can access cloud services, thereby maintaining security while enabling cloud computing versatility.
Data Source
AI summary
An authentication system 100 includes an authentication server 10 and a service providing server 20 for providing a service. When a user requests authentication, the authentication server lets the user input login information, transmits the login information to the service providing server 20, and calculates a first hash value from the login information using a hash function. The service providing server 20 calculates a second hash value from the login information using the same hash function if the login information transmitted from the authentication server 10 matches information that is registered in advance. The authentication server 10 establishes a session with a terminal 30 if the first hash value and the second hash value match each other.