Multi-Device Authentication Key Dispersal for Secure Login
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems are vulnerable to third-party interference during data transmission, allowing unauthorized access as login details can be extrapolated from data in transit, compromising security.
Innovation Solution
An authentication method and system that disperses unique portions of login-related information across multiple devices, using multi-layer encryption and hashing to protect these details, ensuring they are not revealed to the system, thus preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If login details are transmitted during authentication, then authentication can be performed, but third parties can intercept and extrapolate login information from data in transit
Solution Approach 1:
The patent divides the authentication process into multiple independent steps: generating a random authentication string on the server, transmitting only this string to the client, having the client combine it with their login details locally, and then transmitting only the hashed combination back. This segmentation ensures that complete login details never traverse the network, eliminating the vulnerability to third-party interception while maintaining authentication functionality.
2Reliability
If login information is stored and transmitted in encrypted form, then authentication can proceed, but multi-layer encryption and hashing add complexity to the system
Solution Approach 1:
The patent implements preliminary hashing of login details on the client device before transmission. By pre-hashing the authentication string combined with login credentials using a secure hashing algorithm, the system ensures that even if transmission is intercepted, the original login information cannot be recovered. This preliminary cryptographic action simplifies the overall security architecture compared to implementing and managing multiple layers of encryption and decryption protocols.
Data Source
AI summary
The present invention is an platform and/or agnostic authentication method and system operable to authenticate users, data, documents, device and transactions. Embodiments of the present invention may be operable with any client system. The authentication method and system are operable to disburse unique portions of anonymous login related information amongst multiple devices. These devices and the disburse unique portions of anonymous login information are utilized by the solution to authenticate users, data, documents, device and transactions. Login-related information is not stored in any portion of the solution, users and devices are anonymously authenticated. The solution also permits a user to access secured portions of the client system through a semi-autonomous process and without having to reveal the user's key.