Secure Module Authentication Token Signing for User Recognition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods in electronic devices lack assurance of the origin of recognition results and tokens, as they do not securely verify the authentication module's identity and characteristics, making them vulnerable to tampering and unauthorized access.
Innovation Solution
A method involving an authentication module and a secure module, where the secure module signs data representative of the authentication module's characteristics using a private key, ensuring the origin and integrity of recognition results and tokens, and implements a challenge-response process for mutual authentication using cryptographic algorithms and keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used without secure module verification, then the authentication process is simpler and faster, but the security and origin verification of recognition results are compromised
Solution Approach 1:
A secure module is introduced as an intermediary component between the authentication module and the external system. This secure module verifies the authenticity of recognition results through cryptographic signature validation, ensuring that only genuine authentication data is accepted. The intermediary adds security without requiring fundamental changes to the existing authentication flow.
Solution Approach 2:
The system performs preliminary authentication of the authentication module itself before processing user recognition results. The secure module pre-loads public keys and verification algorithms, and validates the authentication module's digital signature capability in advance. This preliminary verification ensures that subsequent recognition results can be trusted without adding significant delay to the actual authentication process.
2Reliability
If cryptographic signing is implemented to verify origin, then the authenticity and integrity of tokens are improved, but the processing time and computational overhead increase
Solution Approach 1:
The system replaces complex multi-step cryptographic verification processes with a streamlined signature validation mechanism. Instead of performing full cryptographic proofs, the secure module validates pre-computed digital signatures using efficient public key verification algorithms. This substitution maintains strong security guarantees while significantly reducing computational overhead and processing time.
Solution Approach 2:
The authentication system adjusts cryptographic parameters to optimize the balance between security and performance. The secure module uses appropriately sized key lengths and signature algorithms that provide sufficient security for the application while minimizing verification time. Parameter optimization ensures that cryptographic operations complete quickly without compromising the authenticity verification.
3Measurement precision
If the authentication module's characteristics are verified and signed, then the integrity and origin assurance are enhanced, but the data processing complexity increases
Solution Approach 1:
The system extracts only the essential characteristics of the authentication module that are needed for verification, such as unique identifiers and cryptographic keys, rather than processing all possible attributes. The secure module extracts and validates only the critical signature and identifying information, ignoring extraneous data. This extraction approach maintains precise origin verification while minimizing processing complexity.
Solution Approach 2:
The verification process applies different levels of scrutiny to different aspects of the authentication data. Critical elements such as digital signatures and module identifiers receive rigorous verification, while less critical metadata receives minimal or no verification. This localized quality approach ensures high precision for origin verification where it matters most while reducing overall processing complexity.
Data Source
AI summary
Disclosed is a method for authenticating a user by using an electronic apparatus including an authentication module and a secure module, which includes the following steps: the authentication module transmits a recognition result to the secure module according to a process that allows the authentication module to be authenticated by the secure module; the secure module generates an authentication token by signing, with a private key stored in the secure module, data including data representing at least one feature of the authentication module; and transmitting the generated authentication token. Also disclosed is an associated secure module, electronic apparatus and system.