Token-Based Authentication Using Multi-Token Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods are vulnerable to single-factor attacks, where exposure of a single authentication element can compromise security, leading to unauthorized access.
Innovation Solution
A token-based authentication system that uses a first and second token to generate a hash value, where the hash is used to participate in a security procedure, ensuring that no single party has access to all authentication elements, thereby enhancing security through multi-factor authentication without exposing all elements simultaneously.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-factor authentication using multiple tokens is implemented, then security against single-factor attacks is improved, but system complexity increases
Solution Approach 1:
The authentication system is segmented into multiple independent tokens (first token stored in memory, second token obtained from short-range apparatus) where each token represents a separate authentication factor. This segmentation ensures that compromise of one token does not lead to complete system compromise, thereby improving security while maintaining manageable complexity through modular design.
Solution Approach 2:
A hash value is introduced as an intermediary element that combines information from multiple tokens without exposing the tokens themselves. The hash serves as a mediator that proves possession of all required tokens while keeping the actual token values hidden, thus enhancing security without proportionally increasing system complexity.
2Ease of operation
If all authentication elements are stored in one location, then ease of operation is improved, but vulnerability to theft increases
Solution Approach 1:
Authentication elements are segmented and distributed across multiple storage locations: the first token is stored in the apparatus memory, while the second token is obtained from a separate short-range apparatus (such as a radio-frequency tag). This physical and logical segmentation ensures that even if one storage location is compromised, the attacker cannot obtain all authentication elements needed for successful authentication.
Solution Approach 2:
The authentication system employs a nested structure where the second token is obtained from a short-range apparatus that can be physically separated from the main apparatus. This nested design allows the authentication elements to be contained within nested layers (main apparatus containing first token, separate short-range apparatus containing second token), providing security through physical separation while maintaining operational convenience through integrated authentication flow.
Data Source
AI summary
According to an example aspect of the present invention, there is provided an apparatus comprising a memory configured to store a first token and a second token, and at least one processing core configured to obtain a first value based at least in part on the first token and the second token, and to cause the apparatus to participate in a security procedure, based at least in part on the first hash, with a second apparatus.