One Time Credential Authentication via Mobile Device Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods require users to reveal their identity and memorize multiple login credentials and passwords, making them vulnerable to identity exposure and brute-force attacks.
Innovation Solution
A method using One Time Credentials (OTCs) generated by mobile devices, which are time-varying and replace traditional login information, allowing secure authentication without exposing personal identity through an intermediary device and cryptographic validation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional login and password authentication is used, then users can access restricted entities, but user identity is revealed and vulnerable to attacks
Solution Approach 1:
The authentication system is segmented into three independent components: the user's mobile device that generates OTC, the intermediary device that collects authentication data, and the authentication entity that validates credentials. This segmentation allows the user's identity to remain on the mobile device while only temporary credentials are transmitted externally, preventing identity exposure.
Solution Approach 2:
The patent implements One Time Credentials (OTC) that are temporary, single-use authentication tokens with short validity periods. These disposable credentials replace traditional permanent login identifiers, ensuring that even if intercepted, they cannot be reused for future attacks since they expire after one use.
2Ease of operation
If fixed login and password are used, then authentication is simple, but vulnerable to brute force and dictionary attacks
Solution Approach 1:
The authentication system transitions from static credentials to dynamic, time-varying OTCs that automatically change based on temporal factors and cryptographic algorithms. The mobile device continuously generates new credentials, making each authentication attempt unique and rendering brute force attacks ineffective since passwords cannot be guessed or reused.
Solution Approach 2:
The OTC generation mechanism operates periodically with time-based expiration and automatic renewal. Credentials are valid only for specific time windows and automatically refresh, creating a periodic authentication pattern that prevents attackers from using captured credentials in future attacks.
3Reliability
If OTP is used instead of fixed password, then attack probability is reduced, but login information is still required which remains static
Solution Approach 1:
The patent merges the identifier and credential functions into a single OTC that contains both identification and authentication elements. The mobile device stores a cryptographic key that serves as both the user's identifier and the basis for generating authentication tokens, eliminating the need for separate static login information that could be targeted by attackers.
4Reliability
If multiple logins and passwords are required for different systems, then access control is maintained, but user memory burden increases
Solution Approach 1:
The mobile device is designed as a universal authentication tool that can generate OTCs for multiple different restricted entities and systems. A single mobile device with the authentication application replaces the need for users to manage multiple credentials across different platforms, as it can dynamically generate appropriate OTCs for any authorized system.
Data Source
AI summary
A user accesses an intermediary device, in communication with a restricted entity, requires a One Time Credential OTC and activates a mobile device previously registered, by the user, in an authentication entity, in order to generate a OTC, based on the information related to the user, to the restricted entity, to the mobile device and to the authentication entity, the OTC credential being then typed in the intermediary device and transmitted therefrom to the restricted entity and, from the latter, to the authentication entity, in which the OTC credential is decrypted and compared with the information related to the user, to the restricted entity, to the authentication entity and to the mobile device registered in the authentication entity, in order to generate an authentication result which is transmitted to the restricted entity, which will decide to accept or to reject the access of the user.