Push Authentication System Using Challenge-Response Token
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional authentication methods are slow and insecure, requiring user interaction for password input and lacking robust security measures, especially in scenarios involving multiple mobile devices.
Innovation Solution
A pushing authentication system that automates the authentication process by using a challenge-response mechanism, eliminating the need for user input and enhancing security through token-based authentication between a client, server, and mobile device token, ensuring secure and accurate authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password authentication is used requiring user input, then the authentication process is simple to implement, but the authentication speed is slow and security is compromised
Solution Approach 1:
The mobile terminal token automatically generates dynamic passwords and completes authentication without requiring user input. The system serves itself by having the token independently generate, send, and verify authentication codes, eliminating the need for manual password entry while maintaining security
Solution Approach 2:
A mobile terminal token is introduced as an intermediary device between the user and the authentication server. This token generates and transmits dynamic authentication codes automatically, serving as a mediator that speeds up the authentication process while enhancing security through automated challenge-response mechanisms
2Adaptability or versatility
If the authentication server pushes information to multiple mobile terminals using token serial number, then the system supports multiple devices, but the information is not pushed accurately to the currently triggered mobile terminal
Solution Approach 1:
The authentication system segments the identification process by using both token serial number and device identification (device ID) as separate identification layers. This segmentation allows the server to first locate the correct terminal group using the serial number, then precisely identify the specific triggered terminal using the device ID, achieving both multi-device support and accurate targeting
Solution Approach 2:
The system adds another dimension to terminal identification by incorporating device ID as a secondary identification layer beyond the token serial number. This dimensional expansion enables the server to accurately distinguish between multiple terminals that may share the same token serial number, ensuring precise information delivery to the currently active device
3Productivity
If user manual password input is required, then the authentication process is transparent and simple, but the authentication speed is reduced and vulnerability to attacks increases
Solution Approach 1:
The mobile terminal token performs self-service by automatically generating dynamic passwords, sending them to the server, and completing the authentication process without user intervention. This automation dramatically increases authentication speed while the token's automatic operation maintains simplicity from the user's perspective
Solution Approach 2:
The system performs preliminary actions by pre-generating dynamic authentication codes on the mobile terminal token before the authentication request is completed. The token prepares and sends these codes in advance, enabling faster authentication processing without requiring users to manually input passwords at the critical moment
Data Source
AI summary
An operating method for a push authentication system and device, belonging to the field of information security. The method comprises: an application interface receiving user information and sending same to an application server; the application server sending the user information and an application identifier to an authentication server; the authentication server generating a push authentication request according to a generated challenge value, token information, the user information and an application name corresponding to the application identifier and sending same to a mobile terminal token; the mobile terminal token generating login information according to the push authentication request, and generating a first response value according to the challenge value when a user selects to confirm login and sending same to the authentication server; and the authentication server generating a second response value according to the challenge value, and returning a authentication success result to the application server when the first response value and the second response value are the same. The present invention can improve the data transmission speed of traditional authentication, and a user does not need to participate in the input of a password, thereby preventing the man-in-the-middle attack and improving the security of authentication.