Multi-Profile Network Authentication Using Encrypted Software Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication methods for accessing multiple user profiles over a network, such as those stored on a web server, are inadequate in protecting confidential information due to vulnerabilities like phishing and man-in-the-middle attacks, especially when using mobile devices that can be easily compromised.
Innovation Solution
A secure authentication method utilizing encrypted software tokens and personal identification numbers (PINs) on a remote device, where each profile is associated with a unique PIN, allowing multiple profile accesses from a single device without storing the PIN persistently, using SSL/TLS protocols for secure communication and one-time password generation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional username and password authentication is used, then ease of operation is improved, but security protection deteriorates
Solution Approach 1:
The authentication system is segmented into multiple independent components: a server-side authentication module, a client-side token storage module, and a PIN-based encryption module. Each component performs a specific function, and together they provide both ease of operation (through automated token retrieval) and security (through encryption and PIN protection).
Solution Approach 2:
An encrypted software token acts as an intermediary between the user's PIN and the profile data on the server. The token is stored encrypted on the client device and decrypted using the PIN only when needed, providing a secure bridge that maintains both convenience and security without requiring direct transmission of credentials.
2Adaptability or versatility
If multiple profiles are accessed from a single device, then adaptability is improved, but security vulnerability increases
Solution Approach 1:
The system segments access control by creating separate encrypted tokens for each profile, with each token protected by its own PIN. This allows multiple profiles to be accessed from a single device while maintaining security, as each profile's data is encrypted and can only be accessed with the correct PIN, preventing unauthorized access even if the device is compromised.
3Ease of operation
If PINs are stored persistently on the device, then ease of operation is improved, but security protection deteriorates
Solution Approach 1:
The system performs preliminary encryption of the PIN with the token before storage, creating an encrypted token that combines both the token and PIN. This preliminary action allows the PIN to be stored without being accessible in plain text, maintaining security while enabling easy operation through automated decryption when needed.
Data Source
AI summary
A network authentication system and method is described for authenticating multiple profile accesses from a single remote device. A device remote from a web server, yet connected to the web server via, for example, the Internet, can allow multiple users to register their profiles within the device. The profiles are registered using a pre-existing user ID and password corresponding to, for example, the user's financial accounts. Multiple profiles and, specifically, the indicia of those profiles, can appear on the display of the remote device allowing each user the ability to select their own registered profile. Access to a profile is granted when the user enters their private PIN. Once the PIN is entered, the private information such as financial account information will be securely forwarded from the web server to the remote device.