Variable Password Authentication Against Interception and Fraud
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods, such as one-factor and two-factor authentication, are inadequate in ensuring secure access to online services due to vulnerabilities like password interception and the need for multiple devices, necessitating a more secure and user-friendly solution.
Innovation Solution
A method utilizing a variable password, generated independently of the user, which is transformed using transformation materials obtained during subscription, ensuring secure authentication without requiring user knowledge of the password.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If confirmation code is transmitted by email, then authentication is enabled, but security is compromised due to malware interception and identical password reuse
Solution Approach 1:
The patent introduces a server as an intermediary that generates and manages authentication codes independently of the user's device. The server receives the user's identifier, generates a unique authentication code, and transmits it securely. This mediator approach prevents direct exposure of authentication credentials to malware on the user's device, resolving the security compromise described in the contradiction.
Solution Approach 2:
The system performs authentication code generation and transmission automatically without requiring user intervention in the critical security steps. The server self-services the authentication process by generating codes based on the user's identifier and transmitting them through secure channels, eliminating the need for users to manually handle authentication credentials and thus preventing malware interception.
2Reliability
If confirmation code is transmitted by SMS, then authentication security is improved, but device complexity increases due to need for multiple devices
Solution Approach 1:
The patent creates a universal authentication system where a single communication terminal can perform both identification and authentication functions. The server handles the authentication code generation and transmission universally across different device types, eliminating the need for separate devices for different authentication factors. This multi-functional approach resolves the device complexity issue while maintaining security.
3Reliability
If variable password is generated independently of user, then security is enhanced by limiting password interception, but ease of operation decreases due to lack of user knowledge
Solution Approach 1:
The server acts as an intermediary that generates variable authentication codes independently of the user. Instead of requiring users to know or remember passwords, the server mediates the authentication process by generating unique codes based on the user's identifier and transmitting them securely. This resolves the contradiction by maintaining high security through independent code generation while simplifying operation as users simply provide their identifier.
4Ease of operation
If traditional authentication methods are used, then ease of operation is maintained, but security against fraud attempts is insufficient
Solution Approach 1:
The patent implements dynamic authentication codes that vary between successive connections and are intended for one-time use. Instead of static passwords that can be reused and intercepted, the system generates new variable codes for each authentication attempt. This dynamic approach maintains ease of operation (users just provide their identifier) while significantly enhancing security against fraud attempts through code variability and limited validity.
Data Source
AI summary
A method for authenticating access via a communication terminal, before a server is disclosed. The method includes, subsequently to the transmission by an access application of the communication terminal, to the server, of a connection request: transforming a variable element, received from the server, using transformation materials obtained upon a subscription before the server, outputting a transformed element; transmitting to the server, an identifier associated to the access and to the transformed element; and receiving an authentication of the access, originating from the server taking the transformed element into account.