Multi-user secret decay for authentication security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional security mechanisms, such as passwords and tokens, are vulnerable to unauthorized access and sharing due to the difficulty in detecting and preventing the replication of seed information on devices like smartphones, which can lead to impersonation and unauthorized access.
Innovation Solution
Implementing automated renegotiation of seeds or secret information, including time-based and counter-based approaches, to ensure uniqueness and divergence from older copies, thereby reducing the effectiveness of stolen or replicated credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional security mechanisms (passwords, tokens) are used, then ease of operation is improved, but security reliability deteriorates due to vulnerability to interception and replication
Solution Approach 1:
The patent implements dynamic secret values that automatically change over time through decay mechanisms. Instead of static passwords and tokens, the system uses time-based one-time passwords (TOTP) and rotating secret keys that periodically update, making intercepted credentials obsolete after a certain time period. This dynamic approach maintains ease of operation while significantly improving security reliability.
Solution Approach 2:
The system changes the parameter of secret persistence by introducing time-based decay and rotation. Secret values have associated time-to-live parameters and automatically expire or rotate after predetermined time periods. This parameter change ensures that even if credentials are intercepted, they become invalid after a short duration, resolving the contradiction between operational simplicity and security reliability.
2Productivity
If seed information is sent with communications, then productivity is improved through efficient authentication, but security reliability deteriorates due to interception risk
Solution Approach 1:
The patent implements disposable, short-lived secret values that are used once or for limited time periods. Each communication uses a fresh or recently rotated secret that becomes obsolete afterward. This approach allows efficient authentication (maintaining productivity) while ensuring that intercepted secrets cannot be reused (improving security reliability).
Solution Approach 2:
The system employs periodic rotation of secret values at predetermined time intervals. Instead of sending the same seed information repeatedly, the system periodically updates secrets and uses time-based one-time passwords for authentication. This periodic action maintains authentication efficiency while eliminating the security risk of reusing intercepted credentials.
3Reliability
If automated renegotiation of seeds is implemented, then security reliability is improved, but device complexity increases
Solution Approach 1:
The patent implements self-service automated renegotiation where devices automatically rotate their own secrets without requiring complex manual intervention. The system uses local time synchronization and automated key derivation functions to rotate secrets periodically. This self-service approach improves security reliability through automated secret rotation while minimizing device complexity by avoiding complex manual renegotiation protocols.
Solution Approach 2:
The system implements feedback mechanisms where devices monitor time-based triggers and automatically initiate secret rotation when predetermined time intervals elapse. The feedback loop involves tracking the age of current secrets and automatically renegotiating when they approach expiration. This automated feedback-based approach improves security through consistent secret rotation while keeping device complexity manageable through standardized time-based triggers.
Data Source
AI summary
Secret information, such as seeds, codes, and keys, can be automatically renegotiated between at least one sender and at least one recipient. Various mechanisms, such as counters, events, or challenges, can be used to trigger automatic renegotiations through various requests or communications. These changes can cause the current secret information to diverge from older copies of the secret information that might have been obtained by unintended third parties. In some embodiments, a secret can be configured to “decay” over time, or have small changes periodically introduced that can be determined to be valid by an authorized party, but can reduce the effectiveness of prior versions of the secret information.