Multi-Factor Authentication Codes Using Offset-Based Time Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Multi-factor authentication processes often fail due to clock drifts or time synchronization issues between computing devices and systems, leading to authentication errors despite the use of correct shared codes.
Innovation Solution
An authentication application proactively determines time synchronization errors and generates a subsequent authentication code using a synchronized authentication application time based on a current device time and an offset parameter value, which is updated to mitigate synchronization issues without requiring user intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the authentication code is generated using device time, then the authentication process is simple and fast, but authentication errors occur due to clock drift or time synchronization issues between computing devices and systems
Solution Approach 1:
The system performs preliminary time synchronization by determining a timing synchronization measure between device time and system time before generating the authentication code. An offset parameter value is calculated and stored in advance based on the timing difference, so that when authentication is needed, the pre-calculated offset can be applied to the current device time to generate the correct authentication code without real-time complex synchronization procedures.
Solution Approach 2:
The invention changes the parameter used for authentication from raw device time to adjusted time (device time plus offset parameter). The offset parameter value is dynamically determined based on the timing synchronization measure between device and system clocks, effectively transforming the authentication parameter to account for clock drift while maintaining the simplicity of using device time as the base.
2Reliability
If manual time synchronization is implemented, then authentication accuracy improves, but user burden and system administration overhead increase
Solution Approach 1:
The authentication application automatically performs time synchronization by determining the timing synchronization measure between device time and system time, calculating the offset parameter value, and applying it to generate authentication codes. The entire process occurs transparently without requiring user intervention, manual clock adjustment, or system administrator involvement, making the system both accurate and easy to operate.
3Measurement precision
If the authentication system requires precise time synchronization, then authentication accuracy improves, but the system complexity and implementation difficulty increase
Solution Approach 1:
The invention extracts the time synchronization problem from the authentication flow by separating the timing measurement function. Instead of requiring the entire authentication system to be complex and synchronized, only the time measurement component uses device time with a pre-calculated offset. The offset parameter captures the synchronization information, allowing the rest of the authentication system to remain simple while achieving precise time measurement through the adjusted time calculation.
Data Source
AI summary
A method comprises sending, from an authentication application deployed on a second computing device to the system, a first authentication code, the first authentication code being generated from a shared code and an authentication application time, wherein the shared code is a code previously shared between the second computing device and the system, and the authentication application time is based on a first current device time of the second computing device and an offset parameter value.