Token-Based Authentication Amortization for High-Frequency Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods, such as private and public key cryptography, face challenges in efficiently authenticating data over unsecure networks due to high processing overhead and vulnerability to key compromise, making them impractical for high-frequency, small transactions, especially in sensitive applications like credit card information and stock trading.
Innovation Solution
A method that amortizes authentication overhead by establishing a secure initial transmission with tokens and subsequently using these tokens to verify authenticity in subsequent, potentially unsecure transmissions, reducing processing power requirements while maintaining security through adaptive token management and checksum validation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key authentication is used, then security is improved, but processing overhead increases
Solution Approach 1:
The patent segments the authentication process into two distinct phases: an initial secure transmission phase where full public key authentication is performed, and subsequent transmission phases where simplified token-based verification is used. This segmentation allows the system to maintain high security when needed while reducing processing overhead for routine communications.
Solution Approach 2:
The patent performs preliminary public key authentication and key exchange during the initial secure transmission before subsequent communications occur. The authentication credentials and tokens are established in advance, eliminating the need for repeated computationally expensive public key operations in later transmissions.
2Reliability
If authentication frequency is increased, then security is improved, but processing power consumption increases
Solution Approach 1:
The patent implements periodic authentication where full public key verification is performed only at the beginning of a transmission session, while subsequent transmissions within the session use lighter-weight token verification. This periodic approach maintains authentication strength for the session while significantly reducing processing power consumption during high-frequency communications.
3Reliability
If key size is increased, then security is improved, but processing overhead increases
Solution Approach 1:
The patent extracts the essential authentication credentials (tokens) from the full public key infrastructure during the initial secure transmission. These extracted tokens are much smaller and require less processing power to verify than complete public key pairs, while still providing sufficient authentication strength for subsequent transmissions.
Data Source
AI summary
A method is disclosed for amortizing the authentication overhead of data transmissions. The method comprises establishing a first secure transmission of data between a transmitter and a receiver by transmitting at least one token to the receiver during the first secure transmission. There may be any number of senders and receivers, and any receivers may be a sender and vice versa. The method also comprises establishing at least one additional transmission of data between the sender and the receiver and transmitting the data and at least one token during the at least one additional transmission. In addition, the method compares the at least one token transmitted during the at least one additional transmission to the token transmitted during the first secure transmission to guarantee the authenticity of that at least one additional transmission. The method may also include transmitting a preselected number of tokens during the first secure transmission. The number of additional transmissions may or may not correspond to the preselected number of tokens. The at least one additional transmission may be conducted over an unsecure connection using open communication. The first secure transmission may be protected or encrypted.