Tokencode Validation via Network State Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional tokencode validation methods require frequent updates of pre-calculated one-time passwords, which can expire and need periodic refreshment, posing challenges in maintaining continuous access to protected resources, especially in offline scenarios.
Innovation Solution
The system implements online and offline tokencode validation by determining network connectivity, sending tokencodes to a remote server for validation when connected, and performing local validation when offline, using a processing device with a content module and authentication module to manage and synchronize tokencodes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If pre-calculated one-time passwords are used for tokencode validation, then access to protected resources is enabled, but the tokencodes expire and require periodic updates
Solution Approach 1:
The system dynamically adapts the validation method based on network availability. When online, it uses server-based validation for continuous freshness; when offline, it switches to local validation with pre-loaded tokencodes. This dynamic approach eliminates the need for periodic manual updates while maintaining security.
Solution Approach 2:
The system performs preliminary actions by pre-loading tokencodes and validation capabilities locally before offline scenarios occur. This preparation enables seamless offline validation without requiring updates during offline periods, resolving the time loss issue.
2Reliability
If server-based validation is used for tokencodes, then security is enhanced, but network connectivity is required
Solution Approach 1:
The validation system dynamically switches between server-based and local validation modes based on network availability. This adaptability allows the system to maintain high security when online while providing offline access capability when needed, resolving the contradiction between security and adaptability.
Solution Approach 2:
The system changes the validation parameter from exclusively server-based to a hybrid model that includes both server-based and local validation capabilities. This parameter change enables the system to adapt to different network conditions while maintaining security through cryptographic validation.
3Adaptability or versatility
If local validation is implemented in the processing device, then offline access is enabled, but update synchronization becomes complex
Solution Approach 1:
The system performs preliminary synchronization of validation data before offline scenarios occur. By pre-loading necessary validation information and establishing synchronization protocols in advance, the system enables offline validation without requiring complex real-time synchronization mechanisms.
Data Source
AI summary
An apparatus comprises a processing device configured to receive a request for access to a given protected resource, to receive a tokencode for validating the request for access to the given protected resource, to determine whether the processing device is connected to a network, to send the tokencode to a remote server over the network for validation responsive to determining that the processing device is connected to the network, and to validate the tokencode in the processing device to access the given protected resource responsive to determining that the processing device is not connected to the network.