Serverless Multi-Factor Authentication via Double Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Biometric authentication systems that rely on centralized storage of biometric information are vulnerable to exploitation, leading to potential false authentication and authorization issues.
Innovation Solution
The implementation of Secure Serverless Multi-Factor Biometric Authentication (SSUBIA) techniques, which enable entities to authenticate securely without storing biometric data in a centralized database or server, using encoded and hashed authentication factors compared with trusted information encoded in entity credentials, allowing for decentralized and serverless authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric information is stored in a centralized database or server, then authentication can be performed efficiently, but the system becomes vulnerable to exploitation and false authentication
Solution Approach 1:
The patent segments the authentication system into distributed authenticator nodes that operate independently without a centralized database. Each node maintains local trusted authentication information, eliminating the single point of failure inherent in centralized storage while maintaining authentication capabilities.
Solution Approach 2:
The patent extracts the centralized database component from the authentication system entirely. Instead of storing biometric information centrally, the system uses decentralized trusted authentication information stored locally at authenticator nodes, removing the vulnerability source while preserving authentication functionality.
2Reliability
If decentralized serverless authentication is implemented, then centralized storage vulnerabilities are eliminated, but system complexity increases
Solution Approach 1:
The patent implements self-service authentication where each authenticator node independently performs authentication operations using locally stored trusted information. Nodes autonomously compare authentication factors against their local trusted data without requiring coordination with a central server, simplifying the operational complexity of the distributed system.
Solution Approach 2:
The patent performs preliminary encoding and hashing of authentication factors during enrollment, storing only the transformed trusted authentication information locally at authenticator nodes. This preliminary processing eliminates the need for complex real-time transformations during authentication operations, reducing operational complexity.
Data Source
AI summary
In general, the techniques of this disclosure describe a system for secure serverless authentication. An authenticator node of the system may receive indications of values of authentication factors associated with an entity. The authenticator node may hash the values of the authentication factors to generate double hashed values of the authentication factors. The authenticator node may compare the double hashed values of the authentication factors with trusted authentication information that is encoded in entity credentials associated with the entity. The authenticator node may determine, based at least in part on comparing the double hashed values of the authentication factors with the trusted authentication information, whether the entity is a trusted entity.