Rolling Token Authentication for Secure Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face challenges in preventing man-in-the-middle and replay attacks, as they require continuous transmission of authentication information like passwords, making it difficult to secure data transmission and reception between terminals.
Innovation Solution
Implementing a rolling token generation and verification system, where rolling tokens with random numbers and timestamps are used instead of traditional authentication information, allowing for secure data transmission and reception by continuously generating and verifying these tokens between terminals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods using passwords or certificates are used, then authentication can be completed, but authentication information is continuously exposed during data transmission making the system vulnerable to man-in-the-middle and replay attacks
Solution Approach 1:
The patent implements dynamic authentication tokens that are generated and updated continuously during the communication session. Instead of using static passwords or certificates that remain unchanged, the system generates time-varying tokens that expire after use, making captured authentication information useless for future attacks. This dynamic approach directly addresses the vulnerability to replay attacks while maintaining authentication reliability.
Solution Approach 2:
The system changes the parameter of authentication information from static (passwords, certificates) to dynamic (time-varying tokens with expiration). Each token is valid only for a specific time window or single use, fundamentally changing how authentication credentials behave during transmission. This parameter transformation eliminates the risk of long-term exposure while preserving authentication functionality.
2Reliability
If passwords or certificates are transmitted continuously for data requests, then authentication can be maintained, but the data transmission procedure becomes cumbersome and complex
Solution Approach 1:
The system performs preliminary authentication using static credentials (password or certificate) only once at the beginning of the session. After this initial authentication, the system establishes a trusted session and uses dynamic tokens for subsequent data transmissions. This preliminary action eliminates the need for repeated password/certificate transmission while maintaining authentication continuity, significantly simplifying the overall procedure.
Solution Approach 2:
The patent introduces dynamic authentication tokens as an intermediary mechanism between the initial authentication and subsequent data transmissions. These tokens serve as a mediator that carries authentication state forward without requiring re-transmission of original credentials. This intermediary approach streamlines the transmission procedure while ensuring continuous authenticated access.
3Ease of operation
If static authentication information is used, then the authentication process is simple, but the system cannot prevent replay attacks and requires continuous re-transmission of credentials
Solution Approach 1:
The system implements periodic generation and renewal of authentication tokens during the communication session. Instead of using the same credentials repeatedly, new tokens are generated at regular intervals or for each data transmission request. This periodic refresh mechanism maintains simple operation for users while providing strong protection against replay attacks, as each token is unique and time-limited.
Data Source
AI summary
A method for transmitting and receiving data of a terminal in a communication system and a communication terminal thereof are provided, which can minimize an exposure of authentication information. A communication terminal includes a rolling token generation unit for generating the rolling tokens; a memory for storing the generated rolling tokens; and a control unit for, if an authentication of the other terminal for performing a communication is completed, generating and transmitting a rolling token whenever a transmission to the other terminal is performed, and in case of receiving a specified rolling token from the other terminal, determining whether the rolling token currently received from the other terminal is identical to the rolling token most recently transmitted.