Multi-Server Authentication Scheme for Impersonation Attack Resistance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing token-based user authentication systems are vulnerable to transient and active attacks, where an adversary can compromise a single server to impersonate users, even with symmetric-key-based schemes and public-key operations.
Innovation Solution
A multi-server authentication scheme using at least two independent servers, where each server shares distinct keys that evolve over time, requiring joint authentication of one-time passcodes to ensure security, and periodic key refreshment to maintain integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single server is used for authentication, then the system is simple and easy to operate, but the system becomes vulnerable to transient and active attacks where an adversary can compromise the server to impersonate users
Solution Approach 1:
The authentication system is segmented into multiple independent servers (first authentication server and second authentication server), each performing independent authentication functions. This segmentation ensures that compromising one server does not compromise the entire authentication system, as each server operates with its own keys and verification logic.
Solution Approach 2:
The system transitions from a single-server authentication model to a multi-server model, adding the dimension of server multiplicity. This dimensional change introduces redundancy and distribution, where authentication must succeed across multiple independent verification points, thereby enhancing security without relying on a single point of failure.
2Reliability
If multiple servers are used for authentication, then security against transient and active attacks is improved, but the authentication process becomes more complex and requires coordination between servers
Solution Approach 1:
The relying server acts as an intermediary that coordinates the authentication process between the user device and multiple authentication servers. The relying server receives the passcode from the user device, distributes authentication requests to multiple servers, and aggregates the verification results, thereby simplifying the operational complexity for the user while maintaining multi-server security.
Solution Approach 2:
The relying server performs multiple functions: it receives authentication requests, distributes them to multiple authentication servers, collects verification results, and makes the final authentication decision. This multi-functionality consolidates the coordination complexity into a single server, making the overall system easier to operate while maintaining security.
3Productivity
If symmetric-key-based schemes are used, then authentication performance is efficient, but the system is vulnerable to transient attacks where an adversary can steal user credentials from the server
Solution Approach 1:
The symmetric keys are segmented and distributed across multiple independent servers rather than stored centrally. Each server holds a portion of the authentication state, and no single server possesses complete user credentials. This key segmentation prevents transient attacks where an adversary could steal all credentials from one server, as the distributed architecture ensures credentials are scattered across multiple verification points.
4Reliability
If public-key operations are used for authentication, then resistance to active attacks is improved, but the computational complexity and processing time increase
Solution Approach 1:
Instead of using computationally intensive public-key operations, the system employs symmetric-key-based passcode verification that can be efficiently copied and verified across multiple servers. The passcode authentication mechanism allows for rapid verification without requiring expensive cryptographic operations, maintaining efficiency while achieving active attack resistance through the multi-server architecture.
Data Source
AI summary
Methods and apparatus are provided for authenticating a user using multi-server one-time passcode verification. A user is authenticated by receiving authentication information from the user; and authenticating the user based on the received authentication information using at least two authentication servers, wherein the received authentication information is based on a secret shared between a security token associated with the user and an authentication authority that provides the at least two authentication servers. For example, the authentication information can comprise a passcode comprised of a tokencode from the security token and a password from the user. The user can be authenticated only if, for example, all of the at least two authentication servers authenticate the received authentication information.