Pseudonymized Authentication via Oblivious Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current user authentication methods fail to simultaneously authenticate users while protecting their privacy and allowing differentiation between users, leading to vulnerabilities in data protection and misuse of user data.
Innovation Solution
A system utilizing an Oblivious Transfer protocol to generate and manage pseudonym tokens, ensuring user authentication while preventing the connection between real identities and pseudonyms, allowing for secure and anonymous user differentiation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication by identification is used to verify user identity, then user authentication reliability is improved, but privacy protection deteriorates because log-on and usage data allow conclusions to the real identity of users
Solution Approach 1:
The patent segments the authentication process into two distinct phases: identification phase (where real identity is verified and bound to a pseudonym) and authentication phase (where the pseudonym is used). This segmentation allows the system to separate the reliability function (verified identity) from the privacy function (pseudonym usage), resolving the contradiction between authentication reliability and privacy protection.
Solution Approach 2:
The patent introduces a pseudonym as an intermediary element between the user's real identity and the authentication system. The pseudonym acts as a mediator that preserves authentication reliability (through cryptographic binding to verified identity) while protecting privacy (by preventing direct identification). This intermediary resolves the contradiction by decoupling the two opposing requirements.
2Object-affected harmful factors
If authentication without identification is used to protect privacy, then privacy protection is improved, but user differentiation deteriorates because it prevents differentiation of users
Solution Approach 1:
The patent segments user differentiation into two levels: system-level differentiation (through pseudonyms that allow the system to distinguish between users) and identity-level differentiation (where real identities remain protected). This segmentation enables privacy protection at the identity level while maintaining user differentiation at the system level through pseudonym-based identification.
Solution Approach 2:
The patent creates a pseudonymous copy of the user identity that can be used for authentication and differentiation purposes. This copy (the pseudonym) preserves the essential function of user differentiation while protecting the original (real identity). The cryptographic binding ensures the copy is uniquely tied to the original without revealing it, resolving the contradiction between privacy protection and user differentiation.
3Object-affected harmful factors
If pseudonym tokens are issued without tracking usage, then privacy protection is improved, but authentication security deteriorates because reused pseudonyms can be exploited
Solution Approach 1:
The patent makes the pseudonym system dynamic by implementing usage tracking and invalidation mechanisms. Pseudonyms transition from valid to invalid state after use, and the system dynamically manages the pool of available pseudonyms. This dynamic approach maintains privacy protection (through continuous pseudonym generation) while improving authentication security (through usage tracking and invalidation of used pseudonyms).
Solution Approach 2:
The patent implements feedback mechanisms where the authentication system tracks pseudonym usage and provides information back to the pseudonym management system. This feedback loop enables the system to identify and invalidate used pseudonyms, preventing their reuse while maintaining privacy protection through continuous generation of new pseudonyms. The feedback mechanism resolves the contradiction by enabling security improvements without compromising privacy.
Data Source
AI summary
An OT or Oblivious Transfer protocol is used to output pseudonym tokens from a list of pseudonym tokens to user entities such that it is possible to obtain pseudonymized authentication by a preceding verification of proof of identity of the respective user entities and marking pseudonym tokens as used as soon as the same are used for authentication by means of the OT protocol after the output.