Remote Server Authentication Using Ephemeral Token Binding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods fail to securely authenticate a specific instance of an identity wallet relevant to a relying party, leading to potential security breaches and unauthorized access.
Innovation Solution
A method involving a remote server assigning a session reference and authentication request to a user agent, which delegates the request to an identity wallet. The identity wallet generates an ephemeral confirmation token displayed to the user, and the user enters a code, which is verified by the remote server using a control token generated from the ephemeral token, ensuring the proof of identity is valid.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user authentication is performed using traditional methods, then the authentication process is simple, but the security against identity theft and unauthorized access is insufficient
Solution Approach 1:
The patent introduces an intermediary binding mechanism that connects the user agent and identity wallet through ephemeral confirmation tokens. This mediator verifies that both devices are operated by the same user without requiring complex cryptographic protocols, thus enhancing security while maintaining operational simplicity
Solution Approach 2:
The patent replaces traditional mechanical authentication methods (passwords, physical tokens) with a digital binding mechanism using ephemeral confirmation tokens. This substitution enables more secure authentication by creating a verifiable link between user agent and identity wallet without the security vulnerabilities of traditional methods
2Object-affected harmful factors
If the same user operates both user agent and identity wallet, then unauthorized access is prevented, but the verification process becomes more complex
Solution Approach 1:
The ephemeral confirmation token acts as an intermediary that simplifies the verification of user identity across devices. Instead of complex identity verification protocols, the system uses this token as a mediator to prove that the same user operates both the user agent and identity wallet, preventing unauthorized access while keeping the process manageable
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention is a method for managing a remote server that assigns to a user agent (30) a session reference (31) and a user authentication request. The user agent (30) delegates the authentication request to an identity wallet (20) that sends a proof (21) of identity to the remote server (10). The user agent and the identity wallet are two separate devices, one of which generates and displays an ephemeral confirmation token (60) and sends to the remote server a control token (65) generated from the ephemeral confirmation token. The other of said devices gets a code (61) entered by the user then communicates with the remote server for contributing to a checking of the code by using the control token. The remote server grants rights associated to the session reference only if the proof of the identity is valid and if said checking is successful.