Pseudonym-Based Asymmetric Authentication for Anonymity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In social networks and other online environments, there is an uncertainty about the true identity of users using pseudonyms, especially when absolute anonymity is desired, making traditional authentication methods ineffective and personal data exchange undesirable.
Innovation Solution
A computer-implemented method using an asymmetric cryptographic key pair with a pseudonym based on the user's public key for authentication, employing a challenge-response procedure and embedding and randomizing functions to generate keys without storing sensitive information, ensuring only the user can access their data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used to verify user identity, then user authenticity can be confirmed, but user anonymity is compromised due to personal data exchange
Solution Approach 1:
The authentication system is segmented into two independent components: pseudonym management (for anonymity) and cryptographic challenge-response verification (for authenticity). The pseudonym acts as a separator between the user's real identity and the authentication process, allowing verification without exposing personal information.
Solution Approach 2:
A pseudonym serves as an intermediary between the user's real identity and the authentication system. The pseudonym is used for all authentication interactions, preventing direct linkage between personal data and authentication verification. The cryptographic key pair associated with the pseudonym mediates the challenge-response process without requiring personal information exchange.
2Loss of information
If pseudonyms are used to ensure absolute user anonymity, then user privacy is protected, but authentication reliability deteriorates due to identity uncertainty
Solution Approach 1:
An asymmetric cryptographic key pair (private key and public key) is associated with each pseudonym. The private key remains secret with the user while the public key is used for verification. This asymmetric structure enables reliable authentication through cryptographic proof without compromising anonymity, as the verification process only requires the public key which does not reveal personal information.
Solution Approach 2:
The traditional mechanical authentication system (relying on personal data exchange and identity verification) is replaced with a cryptographic system based on mathematical proofs. The challenge-response protocol using asymmetric cryptography provides authentication through computational verification rather than personal information validation, ensuring reliability without compromising privacy.
3Measurement precision
If personal data is exchanged for authentication, then authentication accuracy is improved, but information security worsens due to data exposure risks
Solution Approach 1:
Personal data is extracted and removed from the authentication process entirely. Only cryptographic elements (pseudonym, public key, challenge-response data) are used for verification. The authentication accuracy is maintained through cryptographic proof mechanisms that do not require personal information, thereby eliminating data exposure risks associated with personal data exchange.
Solution Approach 2:
The authentication parameters are changed from personal information (names, IDs, contact data) to cryptographic parameters (pseudonyms, public keys, cryptographic signatures). This parameter transformation maintains authentication accuracy through mathematical verification while eliminating the security risks inherent in handling and transmitting personal data.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a computer implemented method for performing a user authentication, wherein an asymmetric cryptographic key pair (116; 118) is associated with the user, said key pair (116; 118) comprising a public key (118) and a private key (116), wherein the method comprises selecting the user to be authenticated using a pseudonym of said user, wherein said pseudonym comprises the public key (118) of the user, the method further comprising performing a cryptographic authentication of the user using the asymmetric cryptographic key pair (116; 118).