Terminal Authentication via Credit Relay During Server Disconnection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems fail to provide a mechanism for terminals to perform authentication processing when they cannot access the authentication server due to network or terminal issues, necessitating a cooperative authentication solution between terminals.
Innovation Solution
Terminals are equipped with processors and memories to facilitate authentication request and result sharing, credit information provision, and validation through another terminal or authentication server, forming a distributed authentication system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a terminal performs authentication processing directly with the authentication server, then authentication security is ensured, but the terminal cannot complete authentication when disconnected from the server due to network or terminal issues
Solution Approach 1:
Another terminal acts as an intermediary between the first terminal and the authentication server. The first terminal provides authentication requests and credit information to the second terminal, which then communicates with the authentication server and relays the authentication result back to the first terminal, enabling authentication when the first terminal cannot directly access the server
Solution Approach 2:
The authentication process is segmented into distinct functional components: the first terminal provides authentication requests and credit information, the second terminal acts as an intermediary to communicate with the authentication server, and the authentication server validates credentials. This segmentation allows each component to perform its specific function independently, improving system reliability
2Reliability
If a terminal stores credit information locally for offline authentication, then authentication can proceed without server connection, but security risk increases if the terminal is compromised
Solution Approach 1:
The second terminal serves as a secure intermediary that temporarily holds and manages credit information during the authentication process. Instead of the first terminal storing sensitive credit information long-term, the information is transmitted to the second terminal which then uses it to communicate with the authentication server, reducing the security exposure of the first terminal
Solution Approach 2:
Credit information is provisioned to the first terminal in advance before authentication is needed. The first terminal provides this pre-provisioned credit information to the second terminal, which then uses it for authentication communication with the server, enabling authentication to proceed without real-time server connection while maintaining security
Data Source
AI summary
A terminal according to one aspect includes: at least one memory configured to store an instruction; and at least one processor configured to perform the instruction, wherein the processor performs the instruction, and thus provides, to another terminal, an authentication request related to data being an authentication target, authentication information about an own terminal, and credit information about the own terminal, acquires, from the another terminal, an authentication result of the another terminal for the authentication request, and reclaims the credit information from the another terminal or an authentication server after the another terminal accesses the authentication server and thus validity of the authentication information is authenticated.