Electronic Device Generating Unique One-Time Passwords
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional user authentication methods, such as IDs and passwords, are vulnerable to exposure and hacking, and one-time password (OTP) systems may generate duplicate codes, failing to ensure uniqueness and security.
Innovation Solution
An electronic device and method that generates a unique code by combining a one-time password (OTP) with a unique user code, using a character set and processor to create sub-codes, ensuring randomness and uniqueness, and transmitting the code for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TOTP is used to generate one-time codes, then code generation is achieved, but code uniqueness cannot be guaranteed due to probability conflicts with other SEEDs
Solution Approach 1:
The patent combines TOTP-generated one-time codes with user-specific unique codes (such as user IDs or device identifiers) to create a composite authentication code. This merging ensures that even if TOTP generates duplicate codes, the addition of user-specific identifiers guarantees overall code uniqueness while maintaining system compatibility
Solution Approach 2:
The authentication code is constructed as a composite structure combining multiple elements: TOTP-generated random components and user-specific identifier components. This composite approach leverages the randomness of TOTP while ensuring uniqueness through user-specific elements, resolving the contradiction between reliability and complexity
2Reliability
If conventional ID and password authentication is used, then user identification is achieved, but security is compromised due to exposure and hacking vulnerabilities
Solution Approach 1:
The system transitions from static ID/password authentication to dynamic one-time code authentication. The code changes periodically based on TOTP time synchronization, ensuring that even if a code is compromised, it becomes invalid after a short time window, thereby enhancing security without significantly impacting user convenience
Solution Approach 2:
The authentication mechanism changes the parameter of code validity from permanent (ID/password) to temporary and time-bound (one-time code). This parameter change ensures that codes have limited validity periods, reducing the window of opportunity for hackers while maintaining ease of use through automated generation
3Ease of operation
If simple passwords are used for easier memory, then ease of operation is improved, but vulnerability to guessing attacks increases
Solution Approach 1:
The system provides self-service automated one-time code generation through the mobile application, eliminating the need for users to manually create and remember complex passwords. The application automatically generates, manages, and updates authentication codes, making the security process transparent and convenient for users
Data Source
AI summary
According to an embodiment of the present disclosure, an electronic device comprises a communication module, a memory storing a first seed for generating a one-time password (OTP), a character set and a first unique code assigned to a first user, and a processor, wherein the processor is configured to generate a first OTP using the first seed, generate a first sub code by mapping an operation result of the first unique code and the first OTP to the character set, generate a second sub code by mapping the first OTP to the character set, generate a code using the first sub code and the second sub code, and transmit the generated code to another electronic device through the communication module.