Operating System Security Key Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional authentication techniques are inefficient and insecure, often requiring users to input passwords or biometric data, which can be compromised, leading to security issues and unnecessary resource usage.

Innovation Solution

A system and method where a computing device generates a security key from unique identifiers, such as serial numbers and network card identifiers, to authenticate with other devices, eliminating the need for traditional login credentials and enhancing security by using an operating system-level authentication mechanism.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional authentication techniques (passwords, biometrics) are used, then users can access remote content, but security is compromised and resource efficiency deteriorates

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The authentication system performs self-service by automatically generating and using security keys without requiring user intervention. The operating system and applications autonomously handle authentication credentials, eliminating the need for users to manually input passwords or biometric data, thus improving both security and efficiency

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent introduces an intermediary authentication mechanism where security keys act as mediators between the user's computing device and remote systems. These keys are generated by the operating system and used to authenticate connections, replacing direct user credential input with an automated intermediary authentication process

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If passwords are used for authentication, then users can log onto remote systems, but the system becomes vulnerable to credential theft and unauthorized access

Engineering Contradiction:
Improvelogin convenienceVSAvoidcredential theft risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the authentication credential from user memory and manual input processes. Instead of using passwords that users must remember and type, the system extracts authentication capabilities into automated security keys generated and managed by the operating system, eliminating the vulnerability of password-based authentication

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent replaces the mechanical system of manual password entry with an automated electronic authentication mechanism. Security keys are programmatically generated and exchanged between systems, substituting the manual mechanical process of typing passwords with an automated electronic credential verification system

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If biometric authentication techniques are used, then user verification is performed, but reliability and cost-efficiency deteriorate

Engineering Contradiction:
Improveuser verification accuracyVSAvoidauthentication cost-efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent employs security keys that can be generated, used, and replaced at low cost. These digital credentials are inexpensive to create and can be quickly regenerated if compromised, providing a cost-effective alternative to expensive and complex biometric authentication systems while maintaining verification reliability

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

Data Source

PatentUS11036864B2Operating system based authentication
Publication Date: 2021.06.15 PAYPAL INC
  • US11036864B2 patent drawing
  • US11036864B2 patent drawing
  • US11036864B2 patent drawing

AI summary

Methods, systems, and computer program products are included for authenticating computing devices. An exemplary method includes associating a security key with an operating system of a first computing device, wherein the security key is generated from a serial number corresponding to the first computing device. A token corresponding to the security key is sent to a second computing device. The token is accessed by the second computing device to authenticate the first computing device. An authenticated session is established between the first computing device and the second computing device. Within the authenticated session, a connection is provided between the first computing device and the second computing device.