Trust Token Provisioning via Blockchain Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing methods for provisioning account tokens on communication devices require multiple login processes, making them time-consuming and inefficient, especially when multiple account tokens are needed, as users must remember and correctly provide large amounts of account data for each token.
Innovation Solution
A method involving a server computer and a blockchain, where a signed key is generated and recorded on the blockchain to create a trust token, allowing multiple account tokens to be provisioned on a communication device without requiring separate logins or transmissions of sensitive data, by using a trust token for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple separate login processes are performed to provision multiple account tokens, then authentication security is maintained, but the provisioning process becomes time-consuming and inefficient
Solution Approach 1:
The system performs preliminary authentication by storing verified credential information and generated account tokens in a database before they are needed. When a user requests tokens, the pre-authenticated information is retrieved and transmitted to the communication device, eliminating the need to repeat the login process for each token provisioning event.
Solution Approach 2:
The server computer implements a universal authentication mechanism that handles multiple account token provisioning requests using a single set of authenticated credentials. The system generates and manages multiple account tokens associated with a single user account, allowing one authentication event to enable access to multiple tokens rather than requiring separate logins for each.
2Reliability
If users provide account data for each account token provisioning, then proper authentication is ensured, but users must remember and correctly provide large amounts of account data
Solution Approach 1:
The system enables self-service authentication by storing the user's credential information and account tokens in a database during an initial setup phase. When provisioning is needed, the system automatically retrieves and transmits the appropriate pre-stored authentication data and tokens without requiring the user to manually re-enter or remember account details, making the process both secure and simple.
3Reliability
If separate login processes are required for each account token, then each token can be securely authenticated, but the overall system complexity increases
Solution Approach 1:
The system merges multiple separate authentication processes into a single unified provisioning operation. The server computer consolidates the authentication of multiple account tokens into one login event, where a single set of credentials authenticates the user for all associated tokens. The system then batch-provisions all necessary tokens in one operation, reducing system complexity while maintaining security through centralized authentication management.
Data Source
AI summary
A trust token may be created including authentication data for a user and his or her associated communication device. The trust token may be transmitted by the communication device to one or more recipients, such as a token server. The recipients may interpret the trust token and verify it against data written to one or more nodes of a blockchain when the user and the communication device registered for the trust token. Once the trust token is verified, the token server may be configured to generate, maintain, and provision account tokens representing sensitive data. The token server may push one or multiple account tokens to the communication device, thereby allowing the communication device to perform transactions with the account tokens. In other words, the implementation of a trust token may allow the communication device to be provisioned with multiple account tokens, without requiring multiple logins or transmissions of sensitive data.