Token-Based Authentication Using Sensor Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing token-based authentication systems face vulnerabilities due to password reuse and compromised passwords, leading to unauthorized access, and struggle to provide customizable and efficient security solutions for networked systems.
Innovation Solution
A computing platform generates user-specific tokens based on user data from sensor systems, which are stored in a token chain and transmitted to a user token device for authentication, allowing for customizable access control and enhanced security by linking tokens across users and devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password-based authentication is used, then users can access systems, but security is compromised due to password reuse and stolen passwords
Solution Approach 1:
The patent replaces passwords with cryptographic tokens that are generated and transmitted to user devices. These tokens serve as copies of authentication credentials that can be stored securely on devices like smart cards or mobile phones, eliminating the need for users to remember or reuse passwords across multiple systems.
Solution Approach 2:
The patent introduces a token issuance authority as an intermediary between the user and the authentication system. This authority generates cryptographic tokens and manages the authentication process, separating the user's identity from the authentication mechanism and preventing direct exposure of credentials.
2Adaptability or versatility
If multiple passwords are required for different systems, then access control is maintained, but user burden increases
Solution Approach 1:
The patent implements a universal token-based authentication system where a single token issued by the token issuance authority can be used across multiple different systems and applications. The token contains information about authorized resources and can be presented to various services to gain access, eliminating the need for system-specific passwords.
Solution Approach 2:
Instead of requiring users to create and remember multiple passwords for different systems, the patent provides a single cryptographic token copy that serves as a universal authentication credential. This token can be stored on a user's device and presented whenever authentication is needed, significantly reducing the authentication burden.
3Reliability
If tokens are stored in token chains and linked across users, then access control is enhanced, but system complexity increases
Solution Approach 1:
The patent segments the authentication system into distinct components: a token issuance authority that generates tokens, user devices that store and present tokens, and various access-controlled systems that verify tokens. This segmentation allows complex token chain management to be distributed across multiple independent components rather than centralized in a single complex system.
Solution Approach 2:
The token issuance authority acts as an intermediary that manages the complexity of token generation, storage, and linking across users. This centralised authority handles the complex operations of creating token chains and establishing relationships between tokens from different users, while individual user devices only need to store and present their own tokens without managing the overall complexity.
Data Source
AI summary
Aspects of the disclosure relate to token-based authentication mechanism. A computing device may receive information, determined by one or more sensors systems, corresponding to a user. The user information may comprise user biological information as measured by the one or more sensor systems. The computing device may generate a token based on the received user information. The computing device may store the generated token, in a memory associated with the computing device. The computing device may transmit the token to a user token device corresponding to the user. The user token device may be used to authenticate the user.