Local Caching Module for One-Time Password Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password management systems in computer networks face challenges with delayed or interrupted network connections, which can hinder authentication processes, especially when relying on remote one-time password (OTP) servers, leading to authentication latency and potential access disruptions.
Innovation Solution
Implementing a local caching module within intermediate network devices to store and manage one-time passwords, allowing for local authentication and reducing dependency on remote OTP servers, even when network connections are delayed or interrupted, by pre-caching OTPs and using cache-alert devices to anticipate user authentication needs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a remote OTP server is used for authentication, then authentication security is improved, but authentication latency increases when network connections are delayed or interrupted
Solution Approach 1:
The system performs preliminary actions by caching OTP data locally in advance before it is needed for authentication. The local caching module stores OTP sequences and their expiration times locally, so when authentication is needed, the system can immediately check the cached data without waiting for remote server responses, thus reducing authentication latency while maintaining security
Solution Approach 2:
The local caching module acts as an intermediary between the client device and the remote OTP server. It stores OTP data locally and can authenticate users without constantly communicating with the remote server, mediating between the need for secure remote authentication and the need for fast local authentication responses
2Productivity
If OTP data is cached locally, then authentication speed is improved, but security risks increase due to local storage of sensitive data
Solution Approach 1:
The system changes parameters by storing not just the OTP values but also their associated expiration times and sequence numbers locally. This allows the system to validate cached OTPs by checking these parameters against current time and expected sequences, maintaining security while enabling fast local authentication without needing to query the remote server for every authentication attempt
3Adaptability or versatility
If local caching is implemented, then dependency on remote servers is reduced, but device complexity increases
Solution Approach 1:
The system extracts the OTP caching and validation functionality into a separate local caching module that operates independently from both the client device and the remote OTP server. This modular approach allows the caching logic to be implemented once in the network infrastructure, providing authentication support to multiple clients without complicating individual client devices
Data Source
AI summary
An intermediate network device includes a local caching module that caches user information from a remote server before a local user requests the information. In particular, the local caching module securely obtains and caches one-time passwords for a local user. The local caching device maintains separate sets of one-time passwords for each user. The local caching module may access the locally cached one-time passwords to authenticate a local user to a resource protected by a one-time password.