Hybrid Token Architecture for Authentication Chaining

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Traditional authentication methods are susceptible to unauthorized access due to compromised data, leading to a need for improved systems that generate unique and reliable authentication tokens for device and user identification.

Innovation Solution

A hybrid token architecture is implemented, using a system with a memory device, communication device, and processing device to generate unique tokens based on authentication identifiers, which link successive authentication sessions, and a machine learning model to analyze and reconfigure authentication chains in response to potential unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used, then the system is simple to operate, but the system is susceptible to unauthorized access due to compromised data

Engineering Contradiction:

Improveauthentication securityVSAvoidauthentication system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The authentication identifier is segmented into multiple distinct portions: device portion, user portion, and authentication record portion. Each portion serves a specific function and contributes to the overall security. This segmentation allows the system to maintain reliability through multiple security layers while managing complexity by organizing authentication data into manageable, functionally distinct components.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces a temporal dimension to authentication by creating a chain of successive authentication sessions linked by tokens. Each authentication session generates a token that must be present in the subsequent session, adding a time-based sequence to the authentication process. This dimensional addition enhances security by making unauthorized access more difficult while maintaining operational simplicity through automated token management.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

2Reliability

If a chain of successive authentication sessions is implemented, then unauthorized access is prevented, but the authentication process becomes more complex

Engineering Contradiction:

Improveauthentication reliabilityVSAvoidauthentication process ease

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system implements self-service authentication mechanisms where the authentication application automatically generates tokens, stores them securely, and presents them in subsequent authentication sessions without requiring user intervention. The transformation function automatically converts authentication identifiers into tokens, and the system automatically validates the authentication chain, maintaining ease of operation despite the enhanced security protocol.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

Tokens serve as intermediaries between successive authentication sessions. Rather than requiring direct verification of the entire authentication history, the token acts as a condensed representation of the authentication chain, simplifying the verification process while maintaining the integrity and reliability of the authentication sequence.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If unique tokens are generated for each authentication session, then security is enhanced, but data storage requirements increase

Engineering Contradiction:

Improveauthentication securityVSAvoiddata storage volume

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent extracts only the essential elements needed for authentication verification into compact token structures. Rather than storing complete authentication records for every session, the system extracts critical verification data into condensed token formats that can be efficiently stored and transmitted. This extraction reduces storage requirements while maintaining the security enhancements provided by unique session-specific tokens.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS11251958B2Security system with adaptive authentication based on tokenization chaining

Publication Date: 2022.02.15 BANK OF AMERICA CORP

AI summary

A system for generating a hybrid token architecture for chaining authenticated interactions is provided. The system includes a memory device for storing computer-readable program; a communication device connected to a network; and a processing device, wherein the processing device is configured to: initiate an authentication session of a user associated with a user interaction; determine an authentication identifier based on at least one of the authentication session and the user interaction, the authentication identifier comprising at least one of a device portion, a user portion, and an authentication record portion; generate a unique token based on the authentication identifier, wherein the unique token is required for a subsequent authentication session, and wherein the unique token links the authentication session with the subsequent authentication session, the authentication session and the subsequent authentication session forming a chain of successive authentication sessions; and store the unique token for the subsequent authentication session.