Time-Based Trust Token Depreciation for Session Hijacking Mitigation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computing systems face security vulnerabilities due to the misuse of security tokens, particularly in session hijacking attacks, and fail to utilize expired or stale tokens effectively during authentication and authorization workflows.
Innovation Solution
Implementing a time-based trust token (TBTT) depreciation system that uses a dynamic security context to limit malicious use and securely manage token trust levels based on the duration since issuance, incorporating temporal and non-temporal factors to determine trust levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If security tokens are issued with long validity periods, then authentication convenience is improved, but security risk increases due to session hijacking attacks
Solution Approach 1:
The patent implements dynamic token depreciation where the trust level of a token changes over time. Tokens start with full trust upon issuance and gradually depreciate to zero trust after a predetermined period. This dynamic approach allows tokens to be useful for authentication convenience while automatically reducing security risk as time passes, resolving the contradiction between ease of operation and security risk.
Solution Approach 2:
The system changes the trust parameter of tokens based on temporal factors. Instead of using fixed validity periods, the patent introduces a continuous trust depreciation parameter that decreases over time. This allows the system to balance authentication convenience (by accepting tokens for extended periods) with security risk mitigation (by reducing trust as tokens age).
2Reliability
If security tokens are expired or stale, then security risk is reduced, but utility is lost as they cannot be used for authentication
Solution Approach 1:
The patent implements a graduated token depreciation system where tokens are not abruptly discarded at expiration but gradually lose trust over time. This allows the system to maintain security reliability by reducing trust in older tokens while preserving their utility for authentication purposes until complete depreciation. The gradual discarding process resolves the contradiction between security reliability and token utility.
3Reliability
If strict token validation is implemented, then security is improved, but system complexity increases due to additional validation requirements
Solution Approach 1:
The patent merges token validation with temporal assessment by integrating trust depreciation calculations into the existing validation process. Instead of adding separate complex validation layers, the system combines security validation with time-based trust evaluation, reducing overall system complexity while maintaining strict security standards.
Data Source
AI summary
Disclosed herein are system, method, and device embodiments for time-based trust token (TBTT) depreciation. In an example embodiment, a service provider system (e.g., a service provider and API service) may receive a connection request including a demographic attribute associated with a first client account from a partner device, match the demographic attribute to client information associated with the first client account, send the partner device a connection request identifier and a URL including a depreciating token, and authenticate a second client account via a login page associated with the URL. Further, the service provider system may receive a verification request including the connection request identifier and the depreciating token, determine a security context of the depreciating token based on a depreciation function and the verification request, and determine, based on the security context, whether to create a connection between the second client account and partner device within the service provider system.