Identity Authentication via Neighbor Credibility Scoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing online authentication technologies rely on terminal device binding, which lacks flexibility when ownership changes, such as when a user purchases a new device, leading to inconvenient and burdensome digital certificate installation processes.
Innovation Solution
A method and apparatus for identity authentication that determines credibility scores based on the number of credible and weighted neighbor network devices, generating authentication notification information to indicate whether an online terminal device has passed identity authentication, allowing for authentication without device binding.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If terminal device binding with digital certificates is used for authentication, then user identity can be verified securely, but flexibility is reduced when ownership changes and installation becomes inconvenient
Solution Approach 1:
The authentication system is segmented into multiple independent components: terminal device identification, neighbor device detection, credibility scoring, and authentication decision-making. This allows the system to verify identity through multiple independent paths rather than relying solely on device-bound certificates, improving flexibility while maintaining security.
Solution Approach 2:
The patent introduces neighbor network devices as intermediaries in the authentication process. These neighboring devices serve as witnesses to verify the credibility of the terminal device through observed behaviors and historical interactions, enabling authentication without direct device binding and thus improving adaptability when ownership changes.
2Reliability
If digital certificates are installed on new devices, then authentication can be performed, but the process becomes burdensome and time-consuming
Solution Approach 1:
The system performs preliminary actions by continuously monitoring and recording the behaviors, transactions, and interaction patterns of terminal devices and their neighbors before authentication is needed. This historical data is pre-processed into credibility scores, so when authentication is required on a new device, the verification can proceed immediately without time-consuming certificate installation.
Solution Approach 2:
The authentication system enables self-service by automatically detecting neighbor devices, computing credibility scores based on observed behaviors, and performing authentication decisions without requiring manual certificate installation or user intervention. The system serves itself by using its own observational data for verification.
3Adaptability or versatility
If neighbor device detection and credibility scoring are implemented, then authentication flexibility is improved, but system complexity increases
Solution Approach 1:
The patent changes the authentication parameters from static device certificates to dynamic credibility scores based on behavioral observations. The system monitors various parameters such as transaction patterns, communication behaviors, and interaction frequencies, then transforms these into a simplified credibility metric that can be quickly evaluated, maintaining flexibility while managing complexity through parameter transformation.
Data Source
AI summary
An identity authentication method is provided. The method comprises receiving request information transmitted by an online terminal device for determining neighbor network devices and determining at least one neighbor network device of the online terminal device according to the request information, identifying at least one credible neighbor network device of the online terminal device from the at least one neighbor network device and identifying at least one weighted neighbor network device of the online terminal device from the at least one neighbor network device, and computing a credibility score of the online terminal device according to a number of the credible neighbor network device and a number of the weighted neighbor network device, generating authentication notification information according to the credibility score, the authentication notification information indicating whether the online terminal device passes identity authentication, and transmitting the authentication notification information to the online terminal device.