Token Authentication via Pseudorandom Parameter Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods are vulnerable to spoofing attacks and network security issues, as they rely on encrypted information that can be intercepted or imitated, leading to potential fraudulent activities.
Innovation Solution
A system where a verification computing device generates a pseudorandom sequence to select parameters from a database, which are used to create tokens for authentication, ensuring secure transactions by comparing generated and received tokens between devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encrypted information is transmitted for authentication, then authentication capability is enabled, but vulnerability to spoofing attacks and interception increases
Solution Approach 1:
A verification computing device is introduced as an intermediary between the first device and second device. This intermediary generates pseudorandom sequences, selects parameters from databases, and verifies tokens, thereby enabling authentication while protecting against spoofing attacks and interception by keeping sensitive information confined within the trusted intermediary system
Solution Approach 2:
The system generates a token that is a cryptographic copy or representation of the authentication credentials rather than transmitting the actual encrypted information. The verification device generates an expected token and compares it with the received token, allowing authentication without exposing the original sensitive data to potential interception or spoofing
2Measurement precision
If user information is stored in databases for authentication, then authentication accuracy is improved, but security risk from database compromise increases
Solution Approach 1:
The authentication data is segmented into multiple parameters stored in separate databases (first database and second database) associated with the verification computing device. The pseudorandom sequence selects specific parameters dynamically, distributing the security risk across multiple segmented data stores rather than relying on a single centralized database
Solution Approach 2:
The system dynamically changes which parameters are used for authentication by selecting them based on a pseudorandom sequence. This parameter variability ensures that even if some parameters are compromised, the authentication mechanism remains secure due to the dynamic selection and the cryptographic nature of token generation
3Reliability
If tokens are generated and transmitted for verification, then authentication security is enhanced, but communication complexity between devices increases
Solution Approach 1:
The verification computing device performs self-service by autonomously generating pseudorandom sequences, selecting parameters from its databases, generating expected tokens, and verifying received tokens. This self-contained verification process enhances security while managing communication complexity by consolidating verification functions in a single intelligent intermediary rather than requiring complex peer-to-peer verification between all devices
Data Source
AI summary
Aspects of the disclosure relate to a system and method for securely authenticating a device via token(s) and/or verification computing device(s). A verification computing device may generate a pseudorandom number or sequence. Based on the pseudorandom number or sequence, the verification computing device may select a first plurality of parameters associated with a user of a device to be authenticated. The verification computing device may transmit, to the device, the pseudorandom number or sequence, and the device may select a second plurality of parameters. The device may generate a token based on the second plurality of parameters. The device may send the token to another device, and the other device may send the token to the verification computing device. The verification computing device may authenticate the device based on the token.