Proof of Work Authentication Using Device Attributes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud services face challenges in providing secure user authentication and protecting against denial-of-service attacks due to their public internet exposure, making it difficult to safeguard against malicious activities.
Innovation Solution
Implementing a proof of work based authentication system that uses a processor to determine and compute a set of computer-based attributes, including hardware and software attributes, to generate a proof of work, which is then transmitted and verified, incorporating hashing algorithms and encryption to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used for cloud services, then authentication can be performed, but the system becomes vulnerable to denial-of-service attacks and security breaches due to public internet exposure
Solution Approach 1:
The system performs preliminary computational work by generating a proof of work that includes a hash of device attributes and a nonce value before authentication is needed. This preliminary computation creates a computational barrier that must be overcome for any authentication attempt, thereby preventing denial-of-service attacks while maintaining secure authentication.
Solution Approach 2:
The system changes the authentication parameter from traditional credential-based verification to proof-of-work-based verification. By introducing computational parameters (hash values, nonces, and device attribute combinations) as the basis for authentication, the system achieves both security and resistance to denial-of-service attacks.
2Reliability
If proof of work computation is required for authentication, then security against denial-of-service attacks is improved, but the computational effort and time required for authentication increases
Solution Approach 1:
The proof of work computation is performed in advance during device registration or initial authentication setup. By completing the computational burden beforehand and storing the resulting hash values, the system enables fast authentication subsequent to the initial computation, thereby reducing authentication time while maintaining security.
Solution Approach 2:
The system creates a cryptographic copy of device attributes (hardware identifiers, software versions, etc.) and incorporates them into the proof of work hash. This copying allows the authentication system to verify authenticity without requiring repeated computational analysis of the actual device, thus reducing authentication time while maintaining security.
3Reliability
If device attributes are collected and hashed for authentication, then authentication uniqueness and security are improved, but the complexity of attribute collection and processing increases
Solution Approach 1:
The proof of work mechanism serves multiple functions simultaneously: it collects device attributes, creates unique authentication identifiers through hashing, verifies device authenticity, and prevents denial-of-service attacks. By making this single mechanism multi-functional, the system reduces overall complexity compared to implementing separate systems for each function.
Solution Approach 2:
The cryptographic hash function acts as an intermediary that simplifies the complex task of collecting and verifying multiple device attributes. Instead of directly processing and comparing numerous attributes, the system hashes them into a unique identifier, which then serves as the authentication credential, thereby reducing processing complexity.
Data Source
AI summary
Apparatuses, methods, and program products are disclosed for proof of work based authentication. One apparatus includes a processor and a memory that stores code executable by the processor. The code is executable by the processor to determine, by use of the processor, a set of computer-based attributes corresponding to a first device. The code is executable by the processor to compute a proof of work based on the set of computer-based attributes. The code is executable by the processor to transmit the proof of work and the set of computer-based attributes to a second device for authentication based on the proof of work and the set of computer-based attributes.