One-Time Password Authentication for Age-Restricted Media Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing age verification systems for controlling access to adult media content lack sufficient security and are vulnerable to passive and replay attacks, failing to ensure accurate authentication and authorization of users based on age.
Innovation Solution
A communication system that generates and compares one-time passwords on both the user's mobile terminal and a trust center server, using a shared secret basic password, to authenticate and verify the user's age, preventing passive and replay attacks by recalculating passwords for each authentication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional age verification systems are used, then access control to adult media content is implemented, but security against passive and replay attacks is insufficient
Solution Approach 1:
The patent implements dynamic authentication by generating one-time passwords that change with each authentication attempt. The password is generated using a seed value combined with a counter that increments with each use, ensuring that no two passwords are identical. This dynamic approach prevents replay attacks since captured passwords become invalid immediately after use.
Solution Approach 2:
The system performs preliminary authentication by verifying the one-time password against the server-generated password before granting access to age-restricted content. This pre-verification step ensures that authentication occurs before any sensitive operations, preventing unauthorized access attempts.
2Reliability
If one-time passwords are generated and compared between mobile terminal and trust center server, then authentication security is improved, but system complexity increases
Solution Approach 1:
The mobile terminal autonomously generates one-time passwords using a stored seed value and counter mechanism, without requiring complex cryptographic operations or continuous network connectivity. This self-service approach simplifies the overall system architecture by distributing the password generation capability to the client device.
Solution Approach 2:
The one-time password mechanism serves multiple functions: it provides authentication, prevents replay attacks, and works offline without network dependency. This multi-functionality reduces the need for separate security mechanisms, thereby managing system complexity while enhancing security.
3Measurement precision
If age verification is performed through clear authentication, then access control accuracy is improved, but user registration process becomes more complex
Solution Approach 1:
The registration process is segmented into distinct steps: first collecting user information and age data, then generating the seed value for one-time password generation, and finally linking the user account to the trust center server. This segmentation makes the complex registration process more manageable and reduces user errors.
Solution Approach 2:
The trust center server acts as an intermediary that stores and verifies user authentication data without requiring direct interaction between the user and the media content provider's verification system. This intermediary approach simplifies the user interface while maintaining precise age verification through backend processes.
Data Source
Figure 1
AI summary
The method involves inputting utilization identification to a mobile phone (40) and a personal computer (50) of a user requesting media contents. A one-time password is produced in the mobile phone, and is transferred to a trust-center, and another one-time password is produced in a server (20) of the trust-center. The passwords are compared at the server. A determination is made whether the user has a preset minimum age depending on another utilization identification e.g. telephone number. Access to the requested contents is controlled based on comparison and determination results. An independent claim is also included for a communication system including a server.