Communication Session Verification via Preliminary Identity Check
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network communication security methods fail to reliably verify the authenticity of communication sessions, leading to potential theft of users' private information, despite the use of complex encryption algorithms.
Innovation Solution
Establishing a new communication session to verify the reliability of the existing session by comparing user-provided private identification information with previously set information, ensuring that proprietary information is only shared if the session is deemed reliable.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex encrypted algorithms and data transmission methods are used to protect communication security, then communication security is improved, but users' private information is still easily stolen by malicious third parties
Solution Approach 1:
The patent performs preliminary verification of the communication session's reliability before the user inputs private information. A verification module checks whether the current communication session is reliable by comparing session identifiers and digital signatures before the authentication phase, preventing information theft in advance rather than relying solely on encryption during transmission.
Solution Approach 2:
The patent introduces a verification module as an intermediary between the user and the communication session. This module acts as a mediator that verifies the reliability of the communication session by checking session identifiers and digital signatures, preventing direct exposure of private information to potentially malicious sessions.
2Reliability
If a verification mechanism is introduced to check session reliability before information input, then information security is improved, but the complexity of the authentication process increases
Solution Approach 1:
The patent segments the authentication process into distinct phases: a verification phase that checks session reliability using session identifiers and digital signatures, and an authentication phase that handles private information input. This segmentation allows the verification of session reliability to be performed separately using simpler mechanisms before the complex authentication occurs.
Solution Approach 2:
The verification of session reliability is performed as a preliminary action before the main authentication process. By checking session identifiers and digital signatures in advance, the system prepares the authentication context without requiring complex verification during the actual password input phase.
3Object-affected harmful factors
If session verification is performed before authentication, then data theft is prevented, but the time required for the authentication process increases
Solution Approach 1:
The session verification using session identifiers and digital signatures is performed as a preliminary action that occurs automatically in the background before the user inputs private information. This preliminary verification prevents data theft by blocking unreliable sessions before authentication begins, without requiring additional user time since the verification happens automatically during the connection establishment phase.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method, device and a system for verifying a communication session are provided. The method comprises: establishing another session with a user-side device at a network device or at another network device associated with the network device before providing proprietary information of a user in a communication session established between the user-side device and the network device; in the another session, sending private identification information of the user to the user-side device; wherein, the verification can be based on a determination by the user on the consistence between the received private identification information and private identification information previously set by the user.