Temporary Code Authentication for Leaked Device ID Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing service authentication methods, such as those using device IDs, fail to control access effectively when device information is leaked, leading to security vulnerabilities in service delivery systems like SaaS and cloud computing.
Innovation Solution
An information processing system and authentication method that generates a device authentication token using a temporary code, which is then verified to issue a device authentication ticket, enhancing security by restricting access and preventing unauthorized use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If authentication is performed using only device ID, then authentication process is simple, but security strength is insufficient when device ID is leaked
Solution Approach 1:
The authentication system is segmented into multiple independent components: device ID verification, temporary code generation, and authentication token creation. Each component performs a specific function, so that compromise of one element (device ID) does not lead to complete system failure. The temporary code acts as a separate security layer that must be obtained through additional verification steps.
Solution Approach 2:
The server performs preliminary actions by generating and storing temporary codes associated with device IDs before actual authentication occurs. When a device ID is presented, the server first checks if a corresponding temporary code exists and is valid, then proceeds to generate the authentication token. This preliminary code verification prevents unauthorized access even if device IDs are leaked.
2Reliability
If multiple authentication factors are introduced, then security strength is improved, but authentication process complexity increases
Solution Approach 1:
The server automatically manages the temporary code lifecycle including generation, storage, validation, and expiration. Clients simply need to present their device ID and receive the authentication token without manually managing security credentials. This self-service approach maintains simplicity for users while implementing robust multi-factor authentication logic on the server side.
Solution Approach 2:
Temporary codes are designed as short-lived, single-use security objects that are automatically generated and discarded. Each temporary code has a limited validity period and can only be used once for authentication. This disposable nature ensures that even if a temporary code is compromised, the window for unauthorized access is minimal, maintaining security without requiring complex long-term credential management.
Data Source
AI summary
An information processing system includes a service utilizing device and at least one information processing device to provide a service for the service utilizing device. A temporary code issuing unit to issue a temporary code is provided in the information processing device. A device authentication token generation unit is provided in the service utilizing device and generates a device authentication token by using the temporary code obtained from the information processing device. A device authentication ticket issuing unit is provided in the information processing device and verifies whether the device authentication token obtained from the service utilizing device is valid by using the temporary code and issues a device authentication ticket depending on a verification result. An access unit is provided in the service utilizing device and accesses a resource in the information processing device by using the device authentication ticket obtained from the information processing device.