Mobile Device Authentication System Using Segmented Simple Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face inconvenience when repeatedly inputting authentication information for various online services, and there is a security risk if the device is lost or authentication information is leaked, allowing unauthorized access.
Innovation Solution
A mobile device system that generates simple authentication information using unique device and electronic device information, allowing single sign-on and secure authentication without re-inputting credentials, even if the device is lost or information is leaked.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If single sign-on is implemented to eliminate repeated authentication input, then user convenience is improved, but security risk increases if device is lost or authentication information is leaked
Solution Approach 1:
The authentication system is segmented into two distinct components: simple authentication information (device-based, auto-generated) and user authentication information (human-based, confidential). This segmentation allows the system to separate the convenience function (automatic device identification) from the security function (human-verified credentials), so that loss of the device does not compromise the user's account security since the leaked simple authentication information alone cannot complete the authentication process without the user authentication information
Solution Approach 2:
The server acts as an intermediary that receives and matches both simple authentication information (from the mobile device) and user authentication information (from the server's stored records). This intermediary role allows the system to verify both types of authentication information against each other, providing a layered security approach where neither component alone is sufficient for successful authentication, thus resolving the contradiction between convenience and security
2Speed
If simple authentication information is generated and stored on the mobile device for automatic authentication, then authentication speed is improved, but vulnerability to unauthorized access increases if device is lost
Solution Approach 1:
Authentication credentials are segmented into two parts: simple authentication information stored on the mobile device for fast automatic processing, and user authentication information stored on the server for security verification. This segmentation enables rapid authentication when the device is in possession of the authorized user while preventing unauthorized access, because the simple authentication information alone is insufficient without the corresponding user authentication information that only the legitimate user can provide
Solution Approach 2:
The system changes the parameter of authentication from a single confidential credential (password) to a two-factor system combining device-based simple authentication information with user-based authentication information. This parameter change maintains authentication speed by using the device-based information for quick verification while enhancing security through the additional layer of user authentication information that must also match, thereby reducing the harmful effect of device loss
Data Source
AI summary
A mobile device is disclosed. The present mobile device comprises: a display for displaying an authentication information input screen for receiving user authentication information when the mobile device is connected to a server providing a service requiring input of the user authentication information; a first communication unit for transmitting, to the server, the user authentication information inputted through the authentication information input screen and first simple authentication information generated in the mobile device; a second communication unit for communicating with an electronic device to receive unique information of the electronic device; and a processor for generating second simple authentication information by using unique information of the mobile device and the unique information of the electronic device, transmitting the second simple authentication information to the server which matches the first simple authentication information to the user authentication information which are matched with each other, and controlling the display to display an authentication result screen provided from the server according to whether or not the first and the second simple authentication information are matched.