Interception-Proof Authentication via Dynamic Token Sets
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional password-based authentication methods are not interception-proof, as they can be compromised by hackers using hidden cameras or network intercepts, and require users to remember complex, site-specific passwords, leading to increased security risks.
Innovation Solution
A system and method using a passcode composed of a predetermined number of symbols, combined with multiple tokens, where each token is a group of at least two symbols, to create a unique and dynamic authentication process that hides the actual passcode among randomly generated tokens, making it difficult for hackers to determine the correct passcode.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password-based authentication is used, then the authentication process is simple and easy to implement, but the security is insufficient and passwords can be intercepted or guessed by hackers
Solution Approach 1:
The authentication system is segmented into multiple independent components: a challenge generator that creates random challenges, a response generator that computes responses using secret keys, and a verifier that checks responses. This segmentation allows each component to perform its specific function securely without exposing the entire authentication mechanism, thereby improving security while maintaining manageable system complexity
Solution Approach 2:
A challenge-response mechanism is introduced as an intermediary between the authentication challenge and the final verification. The challenge generator creates random challenges that are transmitted to the response generator, which computes responses without exposing the secret key. This intermediary process prevents direct interception of passwords while maintaining a clear authentication flow
2Reliability
If complex passwords with multiple requirements are enforced, then password strength is improved, but users struggle to remember passwords across different sites and organizations
Solution Approach 1:
The authentication system changes the parameter being authenticated from static passwords to dynamic challenge-response pairs. Instead of requiring users to remember complex static passwords, the system generates random challenges and verifies dynamic responses. This parameter change maintains strong authentication (each challenge requires a unique correct response) while dramatically improving ease of operation (users only need to interact with the challenge interface, not memorize multiple complex passwords)
3Ease of operation
If passwords are stored in files or applications on user devices, then users can remember their passwords, but the stored passwords become targets for hackers and increase security risks
Solution Approach 1:
The secret key material is extracted from any storage medium and kept exclusively in volatile memory during authentication operations. The system generates challenges and computes responses using in-memory secret keys without writing them to disk or storing them in applications. This extraction eliminates the attack surface associated with stored password files while maintaining user-friendly authentication through the challenge-response interface
Solution Approach 2:
The authentication system uses temporary, volatile in-memory storage for secret keys instead of persistent storage. The keys exist only for the duration of the authentication session and are automatically discarded when memory is reset or the device is powered down. This disposable approach to key storage eliminates long-term security risks while maintaining ease of operation through automated in-memory management
4Reliability
If graphic images, photos, or gestures are used for authentication, then it becomes harder for hackers to steal passwords, but the methods require uploading and storing image files which increases user and system burden
Solution Approach 1:
The authentication system replaces the mechanical approach of uploading and storing image files with a cryptographic challenge-response mechanism. Instead of processing and storing graphical data, the system generates random challenges and verifies cryptographic responses using in-memory secret keys. This substitution eliminates image storage requirements while maintaining or improving security through cryptographic principles
Data Source
Figure 1A
Figure 1B
Figure 1C
AI summary
An interception-proof authentication and encryption system and method is provided that utilizes passcodes with individual pins that are made up of symbols from a set of symbols, and tokens that contain at least two symbols from the set of symbols used for the passcode. Multiple tokens (a "token set") are presented to a user, with some or all of a user's pre-selected pins (symbols) randomly inserted into some or all of the tokens. The user selects a token from the token set for each pin position in the passcode. The user is authenticated based on the selected tokens. Because each selected token may or may not contain one of the pre-selected pins in the user's passcode, and also contains other randomly generated symbols that are not one of the pre-selected pins in the user's passcode, someone that observes which tokens the user has chosen cannot determine what the user's actual passcode is.