Authentication System Using Hash Chain Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measures for personal information stored on data store devices are inadequate, as data breaches still occur despite implemented security protocols, putting sensitive information at risk.
Innovation Solution
A method involving hashing personal authentication information with a hash value pool to generate unrecognizable transformed authentication values, which are compared to reference authentication values for user authentication, ensuring that even if a data breach occurs, the stolen information is useless for unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If personal authentication information is stored in plaintext or simple encrypted form, then user authentication is efficient and straightforward, but the security against data breaches is insufficient
Solution Approach 1:
The system performs preliminary hashing of authentication information multiple times before storage. During authentication, the same preliminary hashing process is executed on the provided credentials and compared against the pre-hashed stored values. This advance preparation of hash chains ensures security without adding complexity to the real-time authentication process.
Solution Approach 2:
The patent introduces hash chains as an intermediary mechanism between the original authentication information and its stored representation. Instead of storing plaintext or simple encrypted passwords, the system stores multiple hashed versions (hash chains) that act as intermediaries. These hash chains provide a security buffer that prevents direct reversal to original credentials even if the stored data is compromised.
2Reliability
If authentication information is transformed into unrecognizable values, then security against data breaches is improved, but the ability to verify authentication must be maintained
Solution Approach 1:
The system uses feedback mechanisms where the hashed authentication value is compared against the stored hash chain values. The verification process provides feedback by checking if the computed hash matches any value in the chain, ensuring accurate authentication verification while maintaining security through the unrecognizable transformed values.
Solution Approach 2:
The patent changes the parameter of authentication verification from direct string comparison to cryptographic hash comparison. By transforming the verification process to work with hashed values instead of plaintext, the system maintains verification accuracy while ensuring that the stored values remain unrecognizable and secure against breaches.
3Reliability
If multiple hash values are used to transform authentication information, then security is enhanced, but the processing time and computational resources increase
Solution Approach 1:
The system performs the computationally intensive multiple hashing operations in advance during system setup or user registration, storing the resulting hash chains. During actual authentication, only a single hash computation and comparison is needed, significantly reducing the processing time experienced by users while maintaining the security benefits of multiple hash iterations.
Solution Approach 2:
The patent applies excessive hashing during the setup phase (creating multiple hash chain values) but uses only a partial verification process during authentication (comparing against pre-computed chains). This distribution of computational effort ensures strong security through multiple hashes while keeping real-time authentication fast by avoiding repeated multiple hashing during login.
Data Source
AI summary
A method implemented on an electronic computing device for authenticating a user includes receiving authentication information from the user. The authentication information is processed to generate a transformed authentication value, such that the received authentication information is unrecognizable from the transformed authentication value. A reference authentication value is obtained. The reference authentication value is unrecognizable from the received authentication information. The transformed authentication value is compared with the reference authentication value. When the transformed authentication value matches the reference authentication value, the user is authenticated.