Offline User Authentication Using Pattern Element Sequences
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional matrix authentication schemes are limited in performing off-line user authentication with reliable security, as the one-time-password derivation rule cannot be hashed and stored on the client, preventing the client from performing independent off-line authentication.
Innovation Solution
An off-line user authentication system that generates and stores pattern element sequences and verification codes on the client, allowing the client to display a presentation pattern and compare the entered one-time password with corresponding verification codes using a one-way function algorithm for authentication, ensuring security against password leakage and brute-force attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the one-time-password derivation rule is stored on the client for off-line authentication, then off-line authentication capability is enabled, but security against password leakage and brute-force attacks deteriorates
Solution Approach 1:
The patent segments the authentication data into two parts: pattern element sequences that are stored on the client, and verification codes that are generated offline but not stored in plain text. The verification codes are created by applying a one-way function to the pattern elements, ensuring that even if the client storage is compromised, the original password derivation rule cannot be recovered.
Solution Approach 2:
The patent introduces a one-way function as an intermediary between the pattern element sequences and the verification codes. This intermediary transforms the stored pattern data into encrypted verification codes, allowing off-line authentication while preventing direct access to the password derivation rule. The one-way function acts as a mediator that enables authentication without storing sensitive credentials.
2Adaptability or versatility
If multiple pattern element sequences are stored on the client for off-line authentication, then authentication versatility is improved, but device complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-storing multiple pattern element sequences and their corresponding verification codes on the client before authentication is needed. This allows the client to perform authentication independently without requiring real-time server communication, enabling versatile off-line authentication while the complexity is managed through efficient storage and comparison operations.
Solution Approach 2:
The patent uses copying by creating multiple copies of pattern element sequences and their transformed verification codes on the client device. These copies enable the client to authenticate using different pattern sets without requiring multiple different client applications or complex processing logic, simply requiring storage and comparison of the copied data structures.
Data Source
AI summary
Disclosed is an off-line user authentication system, which is designed to present a presentation pattern to a user subject to authentication, and apply a one-time-password derivation rule serving as a password to certain pattern elements included in the presentation pattern at specific positions so as to create a one-time password. An off-line authentication client pre-stores a plurality of pattern element sequences each adapted to form a presentation pattern, and a plurality of verification codes created by applying a one-time-password derivation rule to the respective presentation patterns and subjecting the obtained results to a one-way function algorithm. A presentation pattern is created using one selected from the stored pattern element sequences, and presented to a user. A one-time password entered from the user is verified based on a corresponding verification code to perform user authentication. The present invention provides an off-line matrix authentication scheme with enhanced security.