Secret Authentication System Using Distributed Linear Functions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional secret authentication systems face challenges in achieving both high secrecy and cost reduction, as they require high-speed computation devices and are not adequately forward or backward secure against data spoofing and retrieval.
Innovation Solution
A secret authentication system utilizing a simple linear function, where a client and server share distributed data, with a client generating verification data using a one-way function, making it difficult for intermediaries to perform back calculations, and the server cross-checking this data to authenticate the client, while using low-order functions to reduce computational load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex calculation processes are employed to increase secrecy of authentication data, then secrecy is improved, but computation cost increases requiring high-speed computation devices
Solution Approach 1:
The patent changes the mathematical parameters from complex multi-variable equations to simple linear functions with two variables. This parameter simplification maintains the core authentication functionality while dramatically reducing computation requirements, allowing use of low-speed devices without sacrificing the fundamental secrecy mechanism.
Solution Approach 2:
The authentication data is segmented into distributed data points that define a linear function. Instead of using a single complex calculation, the system distributes the authentication information across multiple simple data points (x-coordinates and corresponding function values), which can be processed by low-speed devices while maintaining security through the distributed nature of the data.
2Reliability
If conventional authentication systems are used, then basic authentication functionality is provided, but forward secure and backward secure schemes are not achieved
Solution Approach 1:
The patent introduces dynamic elements by using random numbers to generate the linear function coefficients and data points. This dynamic generation ensures that authentication data changes with each authentication session, providing forward security (past data cannot be used for future attacks) and backward security (future data cannot be retroactively accessed), while the dynamics are implemented through simple random number generation rather than complex cryptographic protocols.
Data Source
AI summary
Authentication data indicating authenticity of a client is distributed into a plurality of function data as distributed data, the plurality of function data including function data specifying a function and rule data specifying the authentication data from the function. The client and a server shares a portion of the plurality of function data. The client calculates verification data from the function data unshared with the server, by performing a calculation process difficult for a third party to calculate the function data, and transmits the verification data to the server. The server verifies authenticity of the client based on the authentication data and distributed data per client stored therein, and the verification data received from the client.