Dynamic Persona Key Generation for Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional identification methods, such as usernames and passwords, can be burdensome and insecure due to the need for multiple representations and the difficulty in managing and communicating them, while biometric technologies may be unsuitable for some users.
Innovation Solution
The generation of a persona key (PK) based on an internet protocol session identifier (IPSI) combined with user data, which can be updated dynamically and used for secure access and encryption, eliminating the need for static identifiers and allowing unobtrusive communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple usernames and passwords are used to increase security, then security against identity compromise is improved, but the complexity of managing and communicating identification increases
Solution Approach 1:
The patent introduces a persona key as an intermediary token that represents the user's identity without exposing sensitive information like passwords or biometric data. This mediator enables secure authentication and data access while simplifying the user experience, as the persona key can be easily shared and regenerated without compromising security or requiring users to manage multiple credentials.
2Ease of operation
If static identifiers are used for identification, then ease of communication is improved, but security against identity compromise deteriorates
Solution Approach 1:
The patent implements dynamic persona keys that can be regenerated at any time based on the user's biometric data and contextual information. This dynamic nature allows the identification token to change when needed, enabling easy communication when the same persona key is used, while simultaneously improving security through regeneration capability that prevents long-term exposure risks associated with static identifiers.
3Reliability
If biometric identification is used, then security is improved, but user acceptance deteriorates due to physical contact requirements and religious objections
Solution Approach 1:
The patent uses biometric data as an intermediary to generate persona keys without requiring direct physical contact with scanning devices during authentication. The biometric data is processed locally to create the persona key, which then serves as the actual identification token. This approach maintains the security benefits of biometric authentication while eliminating the physical contact barrier, thereby improving user acceptance.
Data Source
AI summary
Generating a persona key based on at least internet protocol session information associated with a user equipment and user data associated with the user equipment is disclosed. The disclosed subject matter can enable communication of the persona key to a capturing device to enable a portion of information from a user profile correlated to the persona key to be communicated to a receiving device. In some embodiments, the persona key can further be based on time, date, location, user input, etc. The persona key can be a dynamic representation of identification that can be more secure than conventional static representations. Additionally, the persona key can be communicated by optical, audio, or electromagnetic techniques that can avoid a user having to speak an account number, password, username, etc., to provide access to the portion of the information from the user profile.