Password Authentication System Using Continuous Shift-Value Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password authentication systems are vulnerable to random attacks, where a third party can accidentally succeed in authentication by repeatedly inputting passwords, especially when multiple passwords are set with varying levels of importance, leading to potential leaks of sensitive information.
Innovation Solution
A password authentication system that requires continuous successful input of a password at least twice in defense mode, applying a shift value to the input password to obtain the original password, and changing modes based on authentication failures to enhance security, including a secret mode for higher-security passwords.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a third party repeatedly inputs passwords randomly, then there is a probability that password authentication would succeed by accident, but this increases the risk of password leakage and reduces security
Solution Approach 1:
The system pre-configures a defense mode that activates when authentication failures are detected. This preliminary preparation allows the system to immediately implement continuous authentication requirements without delay, preventing attackers from exploiting response time vulnerabilities while maintaining normal authentication flow for legitimate users.
Solution Approach 2:
The authentication mode dynamically transitions between normal mode and defense mode based on authentication outcomes. In normal mode, single authentication suffices, but upon detecting failures, the system switches to defense mode requiring continuous successful authentication. This dynamic adaptation allows the system to balance security and usability based on real-time conditions.
2Device complexity
If multiple passwords are set with the same importance, then authentication processing is simplified, but this fails to provide enhanced security for more important passwords
Solution Approach 1:
The system applies different authentication requirements to different passwords based on their importance level. Important passwords trigger defense mode requiring continuous authentication, while less critical passwords use standard authentication. This localized differentiation allows the system to enhance security where needed without unnecessarily complicating the overall authentication process.
Solution Approach 2:
The system changes the authentication parameter (number of required successful authentications) based on password importance. For important passwords, the parameter is increased to require continuous successful authentication in defense mode, while standard passwords maintain the original single-authentication parameter. This parameter adjustment provides targeted security enhancement.
Data Source
AI summary
Disclosed is a password authentication system and a password authentication method using continuous password authentication. In the password authentication system, a password is set using an original password and a shift value, and the password authentication system includes a password authentication unit configured to receive a password subjected to the shift value, apply the shift value inversely to the password to obtain the original password and perform authentication processing, a defense mode changing unit configured to change to a defense mode requiring continuous authentication of the password at least twice, and a defense mode control unit configured to require the user to continuously input a first password and a second password, and to determine the authentication of the password as a success and release the defense mode.