Single-Use Authentication Code via Segmented Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication methods are insecure, complex, and limited in their range of use, often relying on stored codes that can be compromised, and are not suitable for direct communication between parties.
Innovation Solution
A method using a trusted third party to generate a temporary random private key and open key, combined into a single-use temporary master authentication code, which is transmitted to the parties involved, ensuring security and minimizing storage, with the code being valid only for a specific transaction or time period.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the entire authentication code is created and stored in the user device and service provider, then authentication can be performed, but security is reduced
Solution Approach 1:
The authentication code is segmented into two separate parts: a random private key stored in the user device and a random open key stored in the service provider database. Neither part alone can authenticate the user, and both are required to form the complete authentication credential. This segmentation eliminates the need to store the entire code in one location, thereby improving security while enabling authentication.
2Reliability
If conventional authentication methods are used, then identification can be performed, but they are complicated to use and do not provide high security
Solution Approach 1:
The user device automatically generates the random private key and performs the authentication process without requiring user intervention for complex operations. The system handles key generation, storage, and transmission automatically, making the high-security authentication method as convenient as conventional methods while providing superior security.
3Reliability
If the authentication code is associated to a certain user, then identification is possible, but predictability increases
Solution Approach 1:
The authentication system uses dynamic random keys that are generated fresh for each authentication session. The random private key in the user device and the random open key in the service provider are dynamically paired to form a temporary authentication credential. This dynamic approach eliminates predictability while maintaining simple association through the matching key pairs.
4Adaptability or versatility
If remote communication authentication methods are used, then identification can be performed, but the range of use is considerably limited
Solution Approach 1:
The authentication method based on random private key and random open key is designed to be universally applicable across different communication scenarios. The same core mechanism can be used for remote communication, direct communication, and various transaction types, making the system highly adaptable without requiring complex protocol variations for different use cases.
Data Source
AI summary
A method for authentication of a first party, A, to a second party, B, by a trusted third party, C, is disclosed. A is registered at C, and the method comprises the steps of receiving a identification data of A from A; determining, based on the identification data, if A has the right to request a random private key, RPK; and generating a temporary RPK. Further, C combines the RPK and a random open key, ROK, to form a single use temporary master authentication code; transmits the RPK to A; and, upon receipt of the RPK and the ROK from B, determines if the received RPK and ROK matches a valid single use temporary master authentication code; and authenticates, in case of match, A to B. The first party, A, may be any handheld device, such as a mobile phone, or a PDA, or a stationary device, such as a stationary computer or an ATM. The communication between the parties may be wired or wireless. A corresponding system is also disclosed.