Time-Based Authentication Code Generation Using Stored Secrets
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems rely on static or predictable authentication codes, which can be vulnerable to unauthorized access and do not effectively manage dynamic changes in time-based security protocols.
Innovation Solution
A time-based authentication technique that generates multiple authentication codes within a short time frame by altering the clock-based time indicator upon specific events, ensuring each code is unique and unpredictable, using a stored secret and dynamic values associated with varying time intervals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static authentication codes are used, then system simplicity is maintained, but security against unauthorized access deteriorates
Solution Approach 1:
The patent implements dynamic authentication codes that change over time intervals, transforming the static authentication mechanism into a dynamic one. The authentication code is regenerated at each time interval based on a stored secret and current time, ensuring that codes are never reused and providing strong security against replay attacks while maintaining reasonable system complexity
Solution Approach 2:
The patent changes the time parameter dynamically to generate different authentication codes. By using the current time within a time interval as a variable parameter combined with a stored secret, the system generates unique authentication codes for each interval, enhancing security without requiring complex cryptographic operations
2Reliability
If time-based authentication codes are used, then security is improved, but synchronization errors and prediction vulnerabilities increase
Solution Approach 1:
The patent performs preliminary actions by pre-defining time intervals and generating authentication codes for each interval before they are needed. The system anticipates potential synchronization issues by having codes ready for adjacent time intervals, allowing the verifier to accept codes from a window of time intervals rather than requiring exact synchronization
Solution Approach 2:
The patent provides a cushioning mechanism by allowing the verifier to accept authentication codes from a range of time intervals around the expected interval. This tolerance window acts as a buffer that absorbs synchronization drift and clock differences between the generator and verifier, preventing authentication failures due to minor timing mismatches
3Reliability
If multiple authentication codes are generated within short time intervals, then resistance to unauthorized access is improved, but code predictability increases
Solution Approach 1:
The patent introduces a stored secret as an intermediary element that is combined with the time parameter to generate authentication codes. This secret acts as a key that transforms the predictable time parameter into an unpredictable authentication code, allowing multiple codes to be generated quickly while maintaining security through the secrecy of the stored secret
Data Source
AI summary
Authentication codes associated with an entity are generated. A stored secret associated with an entity is retrieved. At a first point in time, a first dynamic value associated with a first time interval is determined. A first authentication code based on the first dynamic value is determined. At a second point in time, a second dynamic value associated with a second time interval is determined. A second authentication code based on the second dynamic value is determined. The first and second authentication codes are derived from the stored secret and the amount of time between the first and second points in time is different from the length of the first time interval.