Temporary Authentication Value Generation via Hash Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for secure transmissions are either insecure due to data transmission in plain text or complex and expensive due to advanced encryption schemes, posing risks of unauthorized access and high implementation costs.
Innovation Solution
A method involving a terminal that generates a temporary authentication value using a hash function on identification and security data, dividing it into two parts, and transmitting only the second part to a service provider system for verification, utilizing a Minimal Perfect Hash function for secure and efficient authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If authentication data is transmitted in plain text, then the authentication process is simple and fast, but security is compromised and data can be easily intercepted by eavesdroppers
Solution Approach 1:
The authentication value is divided into two parts: a first part that is not transmitted and a second part that is transmitted to the service provider system. This segmentation allows the system to maintain security by only transmitting a portion of the authentication data while still enabling successful authentication.
Solution Approach 2:
A hash function is introduced as an intermediary mechanism between the authentication value generation and transmission processes. The hash function processes the authentication value to create a transformed version that can be securely transmitted without exposing the original authentication data, thus mediating between security requirements and transmission needs.
2Reliability
If advanced encryption schemes are used to secure authentication data, then security is improved, but the system becomes more complex and expensive to implement
Solution Approach 1:
The patent employs a hash function that creates a temporary authentication value valid only for the current authentication session. This disposable authentication value is generated once and used for a single authentication attempt, eliminating the need for complex long-term encryption keys and schemes while maintaining security for each individual authentication event.
Solution Approach 2:
The authentication value is transformed through a hash function that changes its parameters and representation. This transformation creates a new authentication value with different properties that is suitable for secure transmission without requiring complex encryption mechanisms, thus simplifying the system while maintaining security.
3Reliability
If the entire authentication value is transmitted to verify user identity, then authentication is thorough, but data handling and verification complexity increase
Solution Approach 1:
The authentication value is segmented into two parts, with only the second part being transmitted to the service provider system for verification. This segmentation maintains authentication thoroughness by preserving the essential authentication information while reducing the amount of data that needs to be handled and transmitted, thus lowering verification complexity.
Data Source
Figure 1
Figure 2A~2B
Figure 3
AI summary
The present disclosure inter alia presents a method of generating a temporary authentication value, for use in a secure transmission to a service provider system having one or several computer servers. The method starts with receiving a first identification data and receiving a security data associated with the first identification data. Thereafter, a hash function is applied to the first identification data and the security data to generate a temporary authentication value. The generated temporary authentication value is divided into a first and a second part. The method thereafter comprises transmitting only the second part of the divided temporary authentication value to the service provider system for verification.