Seed Derivation Error Detection in Authentication Tokens

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional authentication systems are burdensome in detecting and replacing defective tokens, requiring multiple unsuccessful authentication attempts and manual administrator intervention.

Innovation Solution

An improved technique that provides error detection and correction capabilities by determining and potentially recreating corrupted seed records within the authentication system, allowing for self-repair and minimizing the need for manual token replacement.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional authentication systems detect defective tokens through multiple unsuccessful authentication attempts, then token reliability can be monitored, but user burden and system complexity increase significantly

Engineering Contradiction:
Improvetoken reliabilityVSAvoiduser burden
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary verification of the seed record by regenerating the derived seed before it is used for authentication. This advance check prevents defective tokens from reaching the authentication stage, eliminating the need for multiple unsuccessful attempts and reducing user burden while maintaining reliability monitoring.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system automatically detects and handles defective tokens through the seed verification mechanism without requiring manual administrator intervention. The automated process reduces both user burden and system complexity by eliminating manual token replacement procedures.

Inventive Principle:
Principle #25Self-service

2Reliability

If manual administrator intervention is required to replace defective tokens, then security control is maintained, but system productivity and user convenience decrease

Engineering Contradiction:
Improvesecurity controlVSAvoidsystem productivity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system automatically verifies seed records and handles defective tokens through the regeneration and comparison process, eliminating the need for manual administrator intervention. This maintains security control through automated verification while significantly improving system productivity by removing manual replacement steps.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system implements a feedback mechanism where the regenerated derived seed is compared with the stored value to automatically identify defective tokens. This closed-loop verification maintains security control while improving productivity by enabling automated defect detection and handling.

Inventive Principle:
Principle #23Feedback

3Reliability

If seed records are verified through regeneration and comparison, then error detection capability is improved, but computational overhead increases

Engineering Contradiction:
Improveerror detection capabilityVSAvoidcomputational overhead
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The seed verification process is performed preliminarily before authentication, regenerating the derived seed from the seed record and comparing it with the stored value. This advance verification improves error detection capability while the computational overhead is minimized by performing the operation only once during seed setup rather than repeatedly during authentication.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8059814B1Techniques for carrying out seed or key derivation
Publication Date: 2011.11.15 RSA SECURITY INC
  • US8059814B1 patent drawing
  • US8059814B1 patent drawing
  • US8059814B1 patent drawing

AI summary

A technique carries out seed (or key) derivation within an electronic apparatus (e.g., a hand holdable electronic apparatus such as a token, an authentication server, etc.). The technique involves acquiring a stored representation of a derived seed, the stored representation of the derived seed resulting from an earlier-performed cryptographic operation based on a higher-level seed. The technique further involves (i) performing a current cryptographic operation based on a stored representation of the higher-level seed, the current cryptographic operation resulting in a current representation of the derived seed, and (ii) providing a corruption detection signal indicating whether the current representation of the derived seed matches the stored representation of the derived seed.