Communication System Authentication Using Prior Interaction Queries
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing high-performance computing (HPC) systems are vulnerable to security breaches due to malicious entities exploiting exposed user credentials, despite implementing measures like firewalls and encryption, as malicious entities continue to circumvent these security features.
Innovation Solution
An authentication system that verifies user identity using publicly known information, such as name or email, by generating queries based on previous user interactions and evaluating responses from the user terminal to confirm authenticity, thereby preventing spoofing attacks without the need for complex, private credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional user credentials (passwords, usernames) are used for authentication, then user identity verification is achieved, but security breaches occur when credentials are exposed to malicious entities
Solution Approach 1:
The patent extracts the authentication mechanism from dependence on secret credentials. Instead of relying on passwords and usernames that can be exposed, the system uses publicly available information (name, email, phone number) combined with device-specific identifiers to authenticate users. This removes the vulnerable element (secret credentials) while maintaining authentication functionality.
Solution Approach 2:
The patent introduces an intermediary authentication server that mediates between the user terminal and the HPC system. This server verifies user identity using public information and device identifiers, then issues authentication tokens. This intermediary layer prevents direct exposure of sensitive authentication data while maintaining security verification.
2Reliability
If complex security measures (firewalls, encryption, one-time passwords) are implemented, then security breach mitigation is improved, but system complexity and user burden increase
Solution Approach 1:
The patent implements a self-service authentication mechanism where the system automatically verifies user identity using publicly available information and device identifiers. The authentication server autonomously queries public databases, verifies device uniqueness, and issues tokens without requiring users to manually configure complex security settings or remember multiple passwords.
Solution Approach 2:
The patent fundamentally changes the authentication parameters from secret-based (passwords, keys) to public-information-based (name, email, phone, device ID). This parameter transformation allows the system to maintain strong security verification while eliminating the need for complex credential management and reducing system complexity.
3Loss of information
If public information is used for authentication, then credential privacy is no longer required, but verification of user identity authenticity becomes more challenging
Solution Approach 1:
The patent merges multiple verification elements into a unified authentication process: public user information (name, email, phone), device-specific identifiers, and authentication server verification. By combining these elements, the system creates a robust verification mechanism that confirms both user identity and device authenticity, making it difficult for malicious entities to spoof credentials even if public information is compromised.
Solution Approach 2:
The patent implements a feedback mechanism where the authentication server continuously verifies user-provided public information against authoritative sources (public databases, registered information) and device identifiers against known device profiles. This feedback loop ensures that even though public information is used, its authenticity is rigorously verified before authentication is granted.
Data Source
AI summary
The systems and methods disclosed herein enable authentication of communication processing systems based on user profile information. The system may receive a network request associated with a user. The system may determine a subset of the user profile information corresponding to previous communications. The system may generate a plurality of queries that request parameters associated with the previous communications. The system may transmit the plurality of queries to the communication processing system. The system may receive a plurality of responses from the communication processing system. The system may determine an authentication status based on whether parameters of the plurality of responses match parameters associated with the previous communications. The system may transmit a communication request to an administrator system.