Multi-Layer OTP Authentication Using Cross-Channel Visual Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods, particularly static passwords and two-factor authentication systems, face challenges in security, ease of use, and deployment, especially in digital transactions, with issues such as usability and vulnerability to replay attacks and time synchronization difficulties.
Innovation Solution
A multi-layered authentication protocol that generates and transmits primary and secondary one-time passwords (POTP and SOTP) through different channels, combined into a tertiary one-time password (TOTP) via an indiscernible noisy image, requiring user confirmation for access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If static passwords are used for authentication, then ease of operation is improved, but security deteriorates due to vulnerability to replay attacks
Solution Approach 1:
The patent implements dynamic passwords that change with each authentication attempt using time-synchronized algorithms on both client and server sides. This transforms the static authentication mechanism into a dynamic one where the password is valid only for a specific time window, preventing replay attacks while maintaining user convenience through automatic generation.
Solution Approach 2:
The system performs preliminary actions by pre-synchronizing time between client and server, and pre-establishing the cryptographic algorithms that will generate passwords. This ensures that when authentication is needed, both parties are already aligned and can immediately generate matching passwords without manual configuration.
2Reliability
If one-time passwords are used to prevent replay attacks, then security is improved, but device complexity increases due to multiple authentication components
Solution Approach 1:
The patent makes the server's authentication system multi-functional by having it perform both password verification and time synchronization in a single process. The server generates passwords using the same algorithm as the client, serving dual purposes of authentication and time alignment, thereby reducing the need for separate dedicated components.
Solution Approach 2:
The client device generates its own one-time passwords locally using a cryptographic algorithm synchronized with the server. This self-service approach eliminates the need for external hardware tokens or complex third-party authentication services, reducing system complexity while maintaining security.
3Reliability
If time-synchronized passwords are implemented, then security against replay attacks is improved, but ease of operation deteriorates due to time synchronization requirements
Solution Approach 1:
The client device autonomously manages time synchronization by maintaining its own clock and using it to generate time-based passwords. The system does not require manual time setting or intervention, as the cryptographic algorithm automatically handles time-based password generation as long as the device clock is functioning.
Solution Approach 2:
The system performs preliminary time synchronization during initial setup and maintains alignment through continuous time-based password generation. By establishing the time reference in advance and using it consistently, the system avoids the need for frequent manual synchronization while ensuring security.
4Reliability
If multiple authentication channels are used, then security is improved through layered authentication, but device complexity increases
Solution Approach 1:
The patent implements a universal authentication server that handles multiple authentication challenges and password verifications through a single unified process. Rather than requiring separate dedicated servers for each authentication type, the same server infrastructure performs all authentication functions, reducing complexity while maintaining layered security.
Data Source
AI summary
The invention relates to a multi-layered authentication system and method for securing transactions over a network. In one embodiment, the system includes a user device, a server comprises an application server, an authentication server, a communication network. For any transaction initiation, in response to an authentication request of the user device, the authentication server performs an authentication of the user device based on user identifier, wherein the authentication comprises a generation phase, a transmission phase and a verification phase. The generation phase includes generation of at least one User Interface (UI) elements, the UI element includes one or more one-time passwords (OTPs), where the transmission phase include transmission of the primary one-time password (POTP) and the secondary one-time password (SOTP) in a single or multiple transmission channels. And, in the verification phase causes the user device to seek confirmation from the user to grant access or authenticate a transaction by presenting a tertiary one-time password (TOTP), where the tertiary one-time password (TOTP) is a combination or overlaid of indiscernible noisy User Interface Element having the primary one-time password (POTP) and the secondary one-time password (SOTP).