Replacement Token Authentication for Secure E-Commerce

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current authentication systems lack robustness in ensuring the authenticity of both users and service providers in electronic commerce transactions, particularly in preventing false representations and ensuring secure data storage and retrieval.

Innovation Solution

A computer-implemented method involving a replacement token that receives a user identifier and encryption keys, requests and verifies a passcode, and activates the token by updating state information, ensuring secure authentication and data access through a combination of user and service provider identifiers, and utilizing tokens that can connect via Internet interfaces.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication systems are used, then the system is simple to operate, but the security and reliability of authentication is insufficient

Engineering Contradiction:

Improveauthentication securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The authentication system is segmented into multiple independent components: tokens stored in dispersed data storage locations, encryption keys separated from user credentials, and multi-factor authentication elements (something you have, something you know, something you are). This segmentation enhances security by ensuring that compromise of one element does not lead to complete system failure.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces intermediary elements including recovery keys that mediate between users and the authentication system, allowing secure recovery without direct access to sensitive credentials. The system also uses intermediary storage mechanisms where tokens are stored in dispersed locations rather than directly accessible by users or service providers.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If data is stored in centralized locations for easy access, then the ease of operation is improved, but the security and privacy of data is compromised

Engineering Contradiction:

Improvedata securityVSAvoiddata access convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

Data is segmented into tokens that are stored in multiple dispersed data storage locations rather than a single centralized repository. Each location holds only a portion of the authentication credentials, and no single location contains complete user credentials. This allows secure storage while enabling access through combination of multiple dispersed elements.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Different parts of the system have different security characteristics tailored to their specific functions. Service providers can access tokens from dispersed storage without obtaining full user credentials. Users can recover accounts through recovery keys without exposing primary authentication credentials. Each component operates with the minimum necessary access rights for its function.

Inventive Principle:

Principle #3Local quality

3Reliability

If multiple authentication factors are required, then the reliability of authentication is improved, but the ease of operation deteriorates

Engineering Contradiction:

Improveauthentication reliabilityVSAvoidauthentication convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The authentication system dynamically adapts the number and type of factors required based on the situation. The system can require one-factor, two-factor, or three-factor authentication depending on the service provider's policies, the user's risk profile, and the specific transaction context. This dynamic approach maintains high security when needed while preserving convenience for low-risk operations.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system enables users to manage their own authentication factors including enrolling biometric data, setting recovery keys, and configuring preferred authentication methods. Users can perform self-service account recovery using recovery keys without requiring customer support intervention, reducing the operational burden while maintaining security.

Inventive Principle:

Principle #25Self-service

4Reliability

If tokens are activated without verification, then the ease of operation is improved, but the security of the system is compromised

Engineering Contradiction:

Improvesystem securityVSAvoidactivation time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary verification actions during token activation including validating passcodes, verifying user identity through multiple factors, and checking the legitimacy of activation requests before the token becomes active. Recovery keys are validated against stored credentials before allowing account recovery, preventing unauthorized activation while maintaining a streamlined process for legitimate users.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS8555079B2Token management

Publication Date: 2013.10.08 WWPASS CORP

AI summary

Systems and methods for generating replacement tokens are described herein.