Authentication Token Seal Scheme Vector Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection methods, such as key-based and token-based authentication systems, are vulnerable to fraud and do not provide robust protection, especially since they rely on easily guessable PINs and time-dependent parameters, leading to reduced security and potential unauthorized access.
Innovation Solution
A data protection system utilizing an authentication token with a memory that stores an array of information items and a seal scheme vector, which is encrypted and used to authorize access based on correct PIN entry, ensuring the arrangement and size of data items match the encrypted scheme, thereby enhancing security by making unauthorized access difficult.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a key-based authentication system is used, then access control is implemented, but the key can be fraudulently replicated allowing unauthorized access
Solution Approach 1:
The authentication data is segmented into multiple information items (I1-IN) stored in specific positions within the array, with random data interspersed between them. The seal scheme vector contains position and size information for each item, requiring coordinated knowledge of all segments for successful authentication, thereby preventing fraudulent replication.
Solution Approach 2:
The seal scheme vector provides asymmetric information about the array structure - it describes the positions and sizes of information items without revealing the actual data content. This asymmetric relationship between the seal (description) and the sealed data (content) prevents straightforward replication attacks.
2Reliability
If a token with time-dependent password is used, then authentication is provided, but the protection is reduced due to easily guessable PINs and known time parameters
Solution Approach 1:
The time dependency and user-chosen PIN elements are extracted from the authentication mechanism. Instead of using time-based passwords or guessable PINs, the system uses a static but structurally complex seal scheme vector that describes the arrangement of information items in the array, making brute-force guessing computationally infeasible.
3Reliability
If entire portions of software are stored on the token, then authentication is enhanced, but the speed of execution is impacted due to compilation requirements
Solution Approach 1:
The seal scheme vector is pre-computed and stored alongside the information items in the array. During authentication, the system only needs to verify the pre-prepared seal against the actual array structure, rather than compiling and executing software portions during runtime. This preliminary preparation maintains security while enabling fast verification.
Data Source
Figure 1~2
Figure 3
Figure 4~5
AI summary
An authentication system based on a token (1) accessible by means of a PIN, and able to authorize or deny access to data to be protected, the token having a memory that stores: an array (100) containing alphanumeric information items (I1-IN) and random alphanumeric data items (RBx,y) interposed between the information items; and a seal scheme vector (SS), of encrypted type, containing information regarding the arrangement of the information items (I1-IN) in the array and information regarding the size in bytes of each random data item, so as to enable access to each of the information items in their respective positions in the array. The authentication system is configured to: subject access to the token to the entering of a correct PIN; decrypt the seal scheme vector; acquire the arrangement information of the information items and the size information of each random data item from the seal scheme vector; check correspondence between the acquired arrangement information and the effective arrangement of the information items in the array, and between the acquired size information and the effective size of the random data; authorize or deny access to the data to be protected on the basis of a result of the previous check.