Reusable Identifier Authentication via Verification Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a growing need for secure and efficient user authentication methods for accessing secured internet portals and devices, particularly in the context of online transactions, where existing systems often compromise on speed and security due to the complexity of user-specific and transaction-specific information in identifiers.
Innovation Solution
The use of reusable identifiers, encoded in QR codes or other visual/auditory forms, that do not contain user-specific or transaction-specific information, allowing for simplified and secure authentication processes across multiple platforms without the need for complex encryption or real-time generation of graphical images, enabling faster and more reliable transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user-specific and transaction-specific information is included in identifiers for authentication, then security is improved, but system complexity and processing time increase
Solution Approach 1:
The authentication system is divided into multiple independent components: a reusable identifier component (QR code) that remains simple and static, and a separate verification component that handles security checks. This segmentation allows the identifier to be simple while the verification system maintains high security through server-side processing of user-specific and transaction-specific information.
Solution Approach 2:
A verification server acts as an intermediary between the reusable identifier and the authentication system. The server receives the simple reusable identifier, then independently verifies user credentials and transaction details from separate secure sources, combining these verifications to authorize access. This intermediary handles the complexity of security checks without burdening the identifier itself.
2Reliability
If complex encryption and real-time graphical image generation are used in authentication, then security is improved, but processing speed decreases
Solution Approach 1:
Security measures are performed in advance during system setup and user registration. User credentials are verified and stored securely beforehand, and the reusable identifier is pre-configured with necessary authorization levels. During actual authentication, the system only needs to retrieve and compare pre-verified information, dramatically reducing processing time while maintaining security.
Solution Approach 2:
Instead of generating complex encrypted graphical images in real-time, the system uses simple reusable identifiers (such as QR codes) that can be quickly captured and transmitted. The complex security verification is performed separately on the server using pre-stored credential copies, allowing fast authentication without compromising security through real-time cryptographic operations.
3Reliability
If multiple passwords and complex authentication methods are required for different websites, then security is improved, but ease of operation decreases
Solution Approach 1:
The reusable identifier serves multiple authentication functions across different websites and services through a single standardized format. Once a user is authenticated through the verification server using their reusable identifier, the same identifier can be used for multiple transactions and services without requiring additional passwords or re-authentication, providing universal access while maintaining security through centralized verification.
Data Source
AI summary
Computer systems and methods are provided for authenticating a user seeking to conduct at least one interaction with a secured capability provided by a computer. The method includes receiving a first signal from the computer providing the secured capability. The first signal includes a reusable identifier corresponding to the secured capability. The method further includes receiving a second signal from an electronic device being used by the user. The second signal includes a copy of the reusable identifier and user verification information. The method further includes using a processor to evaluate, based at least on the first signal and the second signal, whether the user is authorized to conduct the at least one interaction with the secured capability. The method further includes, in response to an indication from the processor that the user is authorized to conduct the at least one interaction with the secured capability, transmitting a third signal including authorization information to at least one of the electronic device and the computer.