Two-Client Login Authentication with Character Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current login authentication methods are vulnerable to viruses and Trojan programs, which can intercept username and password inputs, compromising security as they operate on the same computer device, and are susceptible to being cracked by advanced malware.
Innovation Solution
A method and system that utilize two independent client computers, where a first client sends a login request to a login server to obtain a mapping relationship between original and post-mapping characters, and a second client uses this relationship to send post-mapping information for user authentication, making it difficult for malware to infect both clients simultaneously and obtain user information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If login authentication is performed on a single client computer, then the operation is simple and convenient, but the security is compromised because viruses or Trojan programs on the same computer can intercept user input
Solution Approach 1:
The login authentication process is segmented into two independent parts: a first client that obtains a mapping relationship and a second client that performs the actual login with mapped credentials. This segmentation ensures that even if one client is compromised, the other remains secure, resolving the contradiction between operational simplicity and security reliability.
Solution Approach 2:
A mapping relationship acts as an intermediary between the user's actual credentials and the authentication server. The first client obtains this mapping relationship, which then transforms the original credentials into secure mapped credentials used by the second client for authentication, preventing direct interception of sensitive information.
2Reliability
If security measures are strengthened on the user's computer, then the security level increases, but the vulnerability to advanced malware that can crack security measures remains
Solution Approach 1:
By dividing the authentication process across two separate clients, the system eliminates the single point of failure. Even if advanced malware compromises one client, the segmentation ensures that the other client remains protected, making it extremely difficult for malware to obtain both the mapping relationship and the mapped credentials simultaneously.
Solution Approach 2:
The solution moves the security paradigm from a single-dimension approach (strengthening defenses on one computer) to a multi-dimensional approach by distributing authentication components across two independent clients. This dimensional change creates a security architecture where malware would need to simultaneously compromise multiple independent systems, dramatically reducing vulnerability.
3Reliability
If a mapping relationship between original and post-mapping characters is used, then the security of user information is improved, but the device complexity increases due to requiring two client computers
Solution Approach 1:
The authentication system is segmented into two functional clients with distinct roles. The first client handles obtaining the mapping relationship, while the second client handles the actual authentication. This segmentation, while increasing structural complexity, provides a manageable and clear division of security functions that can be implemented across standard computing devices.
Solution Approach 2:
Both the first and second clients can be implemented on standard computing devices that users already possess. The mapping relationship mechanism is universally applicable to any login authentication scenario, allowing the security enhancement to be deployed across diverse devices and platforms without requiring specialized hardware or software infrastructure.
Data Source
AI summary
A method and system for login authentication is disclosed. The method comprises the steps of: sending, by a first client, a first login request to a login server and receiving a mapping relationship between original characters and post-mapping characters returned by the login server according to the first login request; and sending, by a second client, a second login request to the login server according to the mapping relationship, with the second login request including post-mapping information corresponding to user information determined according to the mapping relationship. The solution in the present invention is to realize joint login by two clients, such that even if one of the clients is infected with a computer virus, no particular user information can be obtained through the infected client. Thus, the security of login authentication and the security of user information can be improved.