Trusted Computing Base Access Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network resource access systems face challenges in securing user accounts from unauthorized access, as users are exposed to risks due to potential password breaches, and existing security measures may not adequately prevent unauthorized activities.
Innovation Solution
The implementation of a trusted computing base (TCB) with a TCB agent and host agent, utilizing a pipe for data transfer, and incorporating both first and second factor authentication modules to enhance access control, allowing for secure access to network resources and shared services over a network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password-based authentication is used, then ease of operation is improved, but security is worsened due to password breaches and unauthorized access
Solution Approach 1:
The authentication system is segmented into multiple independent factors (something you know, something you have, something you are). Each factor is implemented as a separate module that can be individually managed and authenticated, distributing the security burden across multiple layers rather than relying on a single password
Solution Approach 2:
A trusted computing base (TCB) acts as an intermediary between the user and the network resources. The TCB verifies authentication credentials and manages security policies, serving as a mediator that enhances security without requiring users to directly manage complex security mechanisms
2Reliability
If multiple passwords are required for different network resources, then security is improved, but device complexity and user burden increase
Solution Approach 1:
The authentication system is designed with universal principles that allow a single set of authentication credentials to work across multiple network resources and services. The TCB implements standardized authentication protocols that can be applied consistently across different systems, eliminating the need for multiple separate passwords while maintaining security
Solution Approach 2:
Multiple authentication factors and credentials are merged into a unified authentication process managed by the TCB. Instead of requiring separate authentication mechanisms for different resources, the system combines them into a single coordinated process that verifies all necessary credentials before granting access
Data Source
AI summary
A method and a system for access authentication. A shared services resource includes a second factor authentication module. At least one network resource each include a first factor authentication module. A trusted computing base communicates with the shared services and the at least one network resource through a pipe. An assertion may be obtained on a trusted computing base for accessing at least one network resource. At least one of the at least one network resource may be accessed with the trusted computing base when the assertion has been obtained by the trusted computing base and is valid.