Offline Mobile Token Activation via Encrypted QR Seed Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile terminal token activation methods require network connectivity and are inefficient in ensuring seed key security, leading to potential vulnerabilities in identity authentication.
Innovation Solution
A method that allows mobile terminal token activation without network availability, involving a cloud authentication server and client terminal, where a seed generating factor is used to create and encrypt a token seed key, stored securely, and a two-dimensional code is used for activation, enhancing security by allowing re-activation with different seed keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If mobile terminal token activation requires network connectivity, then server verification can be performed, but activation cannot proceed in offline scenarios
Solution Approach 1:
The system pre-generates and stores activation codes on the server side before offline scenarios occur. When activation is needed offline, the mobile terminal token can use these pre-prepared codes without requiring real-time network connectivity, thus resolving the contradiction between reliable server verification and offline activation capability
Solution Approach 2:
An activation code serves as an intermediary between the server and mobile terminal token. This code encapsulates verification information that can be validated locally without requiring continuous server communication, enabling offline activation while maintaining security through the intermediary mechanism
2Ease of operation
If seed key is stored in plain text, then activation process is simple, but security vulnerability increases
Solution Approach 1:
The system transforms the seed key from plain text form to encrypted form by applying cryptographic algorithms. This parameter change in the data representation maintains the functional ability to generate dynamic passwords while significantly improving security against unauthorized access and theft
Solution Approach 2:
The seed key storage uses a composite structure combining encrypted data with decryption keys stored in separate locations. This composite approach ensures that even if one storage location is compromised, the complete seed key cannot be reconstructed, thus enhancing security while maintaining operational simplicity through automated key management
Data Source
AI summary
A method for activating a mobile terminal token, comprising: a cloud authentication server generates a seed generation factor according to an activation request, and acquires a server seed secret key and saves the same according to the seed generation factor, and generates an activation code according to the seed generation factor, and generates an activation verification code and transmits the same to a mobile terminal, and encrypts the activation code using the activation verification code to acquire an encrypted activation code, and a cloud authentication management platform generates a two-dimensional code image according to the received encrypted activation code and transmits the same to a client for displaying, and the mobile terminal token acquires the encrypted activation code according to the acquired two-dimensional code image, and decrypts the encrypted activation code using the acquired activation verification code to obtain an activation code, and acquires the seed generation factor from the activation code, and acquires a token seed secret key according to the seed generation factor and saves the same. The present invention can activate the token when the mobile terminal is without network, ensuring the accuracy of the seed, thus improving the token security.