Multi-Channel Authentication Segmentation for Secure Communications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption techniques are vulnerable to spoofing and man-in-the-middle attacks, particularly in environments with multiple access points like WiFi sites and internet cafes, as attackers can intercept and decode communication keys, compromising security.
Innovation Solution
A system that separates authentication requests and encryption information into multiple portions and transmits them through different communication channels, such as the internet and SMS, to prevent unauthorized access and ensure secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption techniques are used to secure communications, then data confidentiality is improved, but vulnerability to spoofing and man-in-the-middle attacks increases
Solution Approach 1:
The patent segments authentication information into multiple distinct components (e.g., username, password, verification code) and transmits each component through a different communication channel. This segmentation ensures that even if one channel is compromised, the attacker cannot obtain all authentication components needed to successfully spoof or intercept communications.
Solution Approach 2:
The patent introduces an intermediary verification mechanism where a third-party service (such as an SMS gateway or email service) mediates the transmission of authentication components. This intermediary adds an additional layer of security by controlling and verifying the transmission of sensitive information through trusted channels.
2Device complexity
If all authentication information is transmitted through a single channel, then device complexity is reduced, but security against channel breaches deteriorates
Solution Approach 1:
The patent divides authentication information into multiple segments and assigns each segment to a different communication channel for transmission. This segmentation strategy increases security by ensuring that compromise of a single channel does not result in complete authentication failure, while the system manages this complexity through automated assembly of segments at the receiving end.
Data Source
AI summary
A system and method are provided for secure encryption via use of at least two different communication channels, such as the internet and a Short Message Service (SMS) channel, to transmit an authentication request and/or encryption information between at least one user device that is associated with a common user and a network entity. In this regard, an authentication request and/or the encryption information generated in response to an authentication request is separated into at least two portions and transmitted via different communication channels. Even if a third party accesses one of the communication channels and receives a portion of the authentication request and/or the resulting encryption information, the system and method effectively prevent the third party from receiving information sufficient to enable the third party to successfully interpret future communications between the parties since other portion(s) of the authentication request and/or the encryption information is transmitted via other channel(s).