Password Authentication with Offline Credential Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing systems face security challenges due to the risk of unauthorized access when users' passwords are compromised, as they often rely solely on password-based authentication, which can lead to potential changes in system settings, data access, and installation of malicious programs, especially in mobile computing environments where communication with authentication servers may be intermittent.
Innovation Solution
An authentication tool that grants varying levels of access based on the validity of user passwords and one-time passwords (OTPs), with the ability to store credentials for later authentication when the system is offline, and automatically upgrade access when connectivity is restored, ensuring secure access even when disconnected from the authentication server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-factor authentication with OTP is implemented, then security is improved, but device complexity increases
Solution Approach 1:
The patent stores OTP credentials in advance during periods when the authentication server is accessible. This preliminary action allows the system to have authentication credentials ready before connectivity is lost, enabling secure offline authentication without requiring complex real-time server communication.
Solution Approach 2:
The system performs self-authentication by storing and verifying OTP credentials locally on the computing device. This eliminates the need for continuous server communication during authentication, reducing device complexity while maintaining security through self-contained authentication capability.
2Ease of operation
If offline access is allowed with stored credentials, then ease of operation is improved, but security deteriorates
Solution Approach 1:
The patent implements partial authentication by allowing access with stored OTP credentials when the server is unavailable, rather than requiring full server-based authentication. This partial action enables offline operation while accepting a controlled reduction in security verification, balancing usability with security.
Solution Approach 2:
The authentication mechanism dynamically adapts between online and offline modes. When the authentication server is accessible, full server-based verification is performed; when unavailable, the system transitions to using stored credentials. This dynamic behavior allows the system to optimize between security and ease of operation based on connectivity conditions.
3Productivity
If automatic credential storage is implemented, then productivity is improved, but loss of information increases
Solution Approach 1:
The system performs preliminary credential storage during periods of server connectivity, preparing authentication data in advance. This preliminary action enables rapid authentication during offline periods without requiring real-time server communication, improving productivity while controlling information exposure by storing credentials securely beforehand.
Solution Approach 2:
The patent changes the state of credential storage from transient to persistent in local memory when server connectivity is available. This parameter change allows the system to retain credentials for future offline use, improving authentication speed and productivity while managing information security through controlled storage conditions and expiration mechanisms.
Data Source
AI summary
A user credential comprising a user password and a one-time password (OTP) may be provided to access a computing system. The user password is authenticated and the network connection status of the computing system is determined. If the computing system is offline, the user password and the OTP are stored in memory and the user is granted a first level of access to the computing system. Upon detecting that the network connection status of the computing system has changed to online, the user password and the OTP are provided to an authentication server for authentication. If the authentication of the user password and the OTP is successful, the user is granted a second level of access to the computing system, the second level of access being higher than the first level of access.