Cloud Server Authentication with Personalized Security Questions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing user authentication methods, such as OTP-based and biometric authentication, often require additional devices or sensors, and there is a need for more secure and efficient personal authentication systems, especially in cloud computing environments.

Innovation Solution

A cloud server and electronic device system that performs user authentication by generating personalized question and option information based on user data, allowing for multiple attempts with adjustable difficulty levels until a threshold is reached, using a processor to execute instructions for authentication determination.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If OTP-based authentication or biometric authentication is used, then authentication security is improved, but device complexity increases due to requirement of additional devices or sensors

Engineering Contradiction:
Improveauthentication securityVSAvoidadditional devices or sensors
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the authentication mechanism from complex hardware-based systems (OTP devices, biometric sensors) and implements it through software-based question-answer pairs stored in cloud databases. This eliminates the need for additional physical devices while maintaining authentication functionality through personalized questions generated from user data.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent replaces mechanical/hardware-based authentication systems with information-based authentication. Instead of using physical sensors or secure hardware tokens, the system uses processed user data (questions and answers) stored in databases to perform authentication, substituting physical mechanisms with digital information processing.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If traditional authentication methods are used, then ease of operation is maintained, but authentication accuracy and personalization are insufficient

Engineering Contradiction:
Improveauthentication accuracyVSAvoiduser operation simplicity
Core Design Contradiction:
Measurement precisionVSEase of operation

Solution Approach 1:

The patent applies local quality by customizing authentication questions to individual users based on their specific data characteristics. Each user receives personalized questions generated from their unique information (e.g., birthplace, education, occupation), making the authentication both accurate to individual identities and simple for users to answer based on their own knowledge.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system performs preliminary action by pre-generating and storing personalized questions and answers in the cloud database during the user registration phase. This advance preparation allows for accurate, personalized authentication during login without requiring complex real-time processing, maintaining ease of operation while improving authentication precision.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12463953B2Cloud server for authentication user and operating method thereof
Publication Date: 2025.11.04 SAMSUNG ELECTRONICS CO LTD
  • US12463953B2 patent drawing
  • US12463953B2 patent drawing
  • US12463953B2 patent drawing

AI summary

To authenticate account information received from an electronic device, a cloud server receives the account information to be authenticated and a request for the authentication from the electronic device; obtains authentication information for user authentication from user data corresponding to the account information; obtains correct answer data and incorrect answer data based on the authentication information; generates first problem information including first question information and first option information for the user authentication based on the correct answer data and the incorrect answer data and transmits the first problem information to the electronic device; receives a user input in response to the first option information from the electronic device; and determines whether the authentication is successful based on whether the user input corresponds to a correct answer.