Token Management Server Grouping and Invalidating One-Time Passwords
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing one-time password systems face security risks due to unused tokens remaining valid, which can lead to unauthorized access when multiple tokens are issued simultaneously, making it difficult to track which token is used for authentication.
Innovation Solution
A server system that issues and manages multiple tokens, associating and grouping them, where upon validation of one token, all associated tokens are marked as used, ensuring security without compromising convenience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If multiple one-time passwords are issued to a user in a short time, then the convenience of continuous user actions is improved, but the security risk increases due to unused tokens remaining valid
Solution Approach 1:
The patent merges multiple one-time passwords into a grouped relationship where they share a common validity status. When one token in the group is used or expires, all associated tokens are automatically invalidated, preventing the security risk of unused tokens while maintaining the convenience of issuing multiple tokens for continuous user actions.
Solution Approach 2:
The patent implements dynamic validity management for one-time passwords. The validity status of tokens is not static but changes automatically based on system events (token usage or expiration). This dynamic approach ensures that unused tokens are invalidated in real-time, addressing the security concern while preserving the ability to issue multiple tokens conveniently.
2Reliability
If the expiration period of each one-time password is set short, then the security level is improved, but the usability deteriorates when multiple tokens are issued
Solution Approach 1:
The patent combines multiple short-validity tokens into a coordinated group, allowing the system to maintain short expiration periods for security while ensuring that only one token in the group remains effectively usable. This merging approach preserves both the security benefit of short expiration and the usability benefit of having multiple tokens available.
3Object-affected harmful factors
If one-time passwords are invalidated every time a new token is issued, then the security risk is reduced, but the convenience of continuous user actions deteriorates
Solution Approach 1:
The patent segments the validity management of one-time passwords by creating distinct validity groups. Instead of invalidating all tokens universally, the system segments validity into grouped relationships where tokens share validity status only within their group. This allows new tokens to be issued without invalidating unrelated tokens, maintaining security within groups while preserving convenience across continuous user actions.
Data Source
AI summary
A server that verifies a token acquired from an information processing apparatus includes at least one memory and at least one processor that executes a program stored in the memory to issue a plurality of tokens including a first token and a second token to a user, associate and manage the first token and the second token, and to invalidate, when the first token is received from the information processing apparatus, the second token managed in association with the first token.