Server Authentication Using Hash Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current user authentication methods, such as password-based systems and biometric techniques, are vulnerable to malicious software and do not confirm the user's identity securely, while physical tokens are inconvenient and do not guarantee the correct user's presence.

Innovation Solution

A server processing system that transfers an index from a keymap to a user device, where the user determines a code based on the index and a personal identifier, and then generates a hash value for authentication, comparing it against a stored hash value to verify access to a secure environment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If password-based authentication is used, then user identity can be verified, but the system becomes vulnerable to malicious software and keylogging attacks

Engineering Contradiction:

Improveauthentication securityVSAvoidvulnerability to malicious software

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the personal identifier from the authentication transmission path entirely. Instead of transmitting or processing the actual personal identifier on the server, the system uses only hash values and indices. The personal identifier remains exclusively in the user's local storage, removing it from the attack surface of malicious software and network interception.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces hash values as an intermediary between the personal identifier and the authentication verification process. The hash function acts as a one-way mediator that transforms the personal identifier into a form that can be verified without revealing the original identifier, preventing malicious software from capturing usable authentication data.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If biometric authentication is used, then user identity can be confirmed, but the system becomes vulnerable because biometric features cannot be altered if compromised

Engineering Contradiction:

Improveuser identity confirmationVSAvoidability to change authentication credential

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic authentication credentials through personal identifiers that users can change at will. Unlike static biometric features, the personal identifier is a flexible credential stored locally that can be updated by the user through the authentication system, providing adaptability while maintaining strong identity confirmation through hash verification.

Inventive Principle:

Principle #15Dynamics

3Reliability

If physical tokens are used for authentication, then access control can be implemented, but the system becomes inconvenient as users must carry the device and cannot confirm the correct user's presence

Engineering Contradiction:

Improveaccess controlVSAvoiduser convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical physical token system with a digital authentication mechanism based on hash verification. Instead of requiring users to carry physical devices, the system uses cryptographic hash functions to verify authentication credentials stored locally on user devices, eliminating the need for physical tokens while maintaining access control security.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

4Reliability

If the personal identifier is stored on the server, then authentication verification can be performed, but the system becomes vulnerable to data breaches and malicious software

Engineering Contradiction:

Improveauthentication verificationVSAvoidexposure to malicious software

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the personal identifier from the server environment entirely and stores it exclusively in the user's local storage. The server only maintains hash values and indices, which are computationally derived from the personal identifier but do not reveal it. This extraction removes the personal identifier from the server's attack surface, preventing malicious software on the server from accessing or stealing it.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The hash function serves as an intermediary that allows the server to verify authentication without ever seeing or storing the actual personal identifier. The server stores and processes only the hash values, which act as a one-way representation of the personal identifier, preventing exposure to malicious software while enabling verification.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS9871805B2User authentication

Publication Date: 2018.01.16 TOKEN ONE

AI summary

A method, system, server processing system and computer readable medium for authenticating a user attempting to access a secure environment is disclosed. In one aspect, the server processing system is configured to: receive an authentication request to authenticate the user attempting to access the secure environment; transfer, to the user or a user device associated with the user, an index corresponding to a selected key from a keymap; receive data indicative of a code which is based on the selected key presented by the user device and a personal identifier, and determine, using the code whether the user is authenticated. Advantageously, the server processing system never stores nor receives data directly indicative of the personal identifier such that no one else is able to determine the personal identifier, not even an employee of the secure environment which the user is attempting to access.