Token-Based Authentication Using Display Character Transformation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems are vulnerable to theft and interception, particularly in remote transactions, due to their complexity and reliance on single-factor authentication methods, which are costly and difficult to implement on a large scale.
Innovation Solution
A token-based authentication system that generates display characters, allowing users to transform and report a subset of these characters, which can be verified by an authentication entity using pre-shared logic, providing a two-factor authentication resistant to interception and theft.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex multi-factor authentication devices (cards with keyboards, fingerprint readers, digital certificates) are used, then authentication security is improved, but device complexity and implementation cost increase
Solution Approach 1:
The authentication system is segmented into two separate components: a simple token device that generates display characters and a computing device that performs the authentication logic. This segmentation allows the token to remain simple while the authentication security is maintained through the combination of token possession and displayed character transformation.
Solution Approach 2:
Display characters serve as an intermediary between the token and the authentication verification. The token generates display characters that are transformed based on user knowledge, creating a mediator that links the physical token possession with the user's secret knowledge without requiring complex integrated devices.
2Reliability
If expensive authentication devices are distributed widely, then authentication security is improved, but distribution cost and scalability worsen
Solution Approach 1:
The token is designed as a simple, low-cost device that can be easily manufactured and distributed. Rather than using expensive, complex authentication devices, the system employs inexpensive tokens that generate display characters, making widespread distribution economically feasible while maintaining security through the multi-factor authentication approach.
3Ease of operation
If single-factor authentication is used, then implementation simplicity is improved, but vulnerability to theft and interception worsens
Solution Approach 1:
The system merges two authentication factors into a unified process: something the user has (the token) and something the user knows (the transformation of display characters). This combination is implemented in a way that maintains operational simplicity while fundamentally improving security against theft and interception compared to single-factor authentication.
Data Source
AI summary
The invention provides an authentication system and method. In particular, the invention provides a method for performing a financial authentication utilizing a token associated with a user, the method comprising the token generating a set of display characters that are viewable by the user, the token generating the display characters using logic; the user transforming a portion of the set of display characters using a transformation process, based on knowledge of the user, so as to form a display character sequence; the user outputting the display character sequence to an authentication entity; and the authentication entity authenticating the display character sequence using the logic and knowledge of the transformation.