One-Time Password Table Generation for Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems face challenges in making one-time passwords easy to memorize while maintaining high security, particularly in length and complexity.
Innovation Solution
An authentication system that generates a table with character strings in squares, allowing users to select positions based on a memorizable rule, generating a long one-time password through randomly assigned character strings, with a server-device-mobile presentation device configuration for secure communication and authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a long one-time password is generated to improve security, then security is improved, but the rule becomes harder for users to memorize
Solution Approach 1:
The authentication system divides the one-time password generation into two independent segments: (1) a memorizable selection rule that users create and remember, and (2) a randomly generated character table that is freshly created each authentication session. This segmentation allows the rule to remain simple and memorable while the actual password content becomes long and complex through random character assignment, resolving the contradiction between memorability and security.
Solution Approach 2:
Users perform preliminary action by creating and memorizing their selection rule in advance, before the authentication session begins. During the actual authentication, they only need to apply this pre-memorized rule to the randomly generated table, rather than memorizing the entire password. This preliminary preparation enables long passwords to be generated without increasing user memory burden.
2Reliability
If the one-time password length is increased to enhance security, then security is improved, but the complexity of the system increases
Solution Approach 1:
The system segments complexity into two parts: minimal client-side complexity (only needing to implement the simple selection rule application) and server-side complexity (handling random table generation and password verification). This segmentation allows long one-time passwords to be generated securely without requiring complex client devices, as the heavy computational burden rests on the server.
Solution Approach 2:
The system uses the user's own memorized selection rule as the security mechanism, eliminating the need for complex key management infrastructure on the client side. The user's rule serves as their own authentication key, simplifying the overall system architecture while enabling secure long password generation through server-side random character assignment.
Data Source
AI summary
An authentication system by which character strings in squares are selected by a rule determined by a user out of a table in which character strings are assigned to obtain a one-time password. The user memorizes a rule of successively selecting three out of the positions of the squares in a table having five rows and five columns, for example. To each square (402) in the table (401) to be presented to the user, a randomly generated two-digit number is assigned. The table (401) is presented to the user, who arranges the numbers in the squares (402) on the basis of the user's own rule to generate a six-digit number used as a one-time password for authenticating the user. Therefore, the rule for obtaining a one-time password is easy for the user to memorize and a long one-time password can be obtained.