Web Server Authentication via Terminal Identifier Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current internet service authentication methods are vulnerable to fraud, as users often rely solely on identifiers and passwords or session cookies, which can be easily compromised, leading to unauthorized access and security breaches.
Innovation Solution
A method that involves obtaining identifiers for both the terminal and user after successful authentication, comparing them with stored information to generate an access parameter, which configures the service and enhances user verification, potentially using a trusted server for verification and dynamic knowledge of the trusted server's information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (identifier and password only) are used, then the authentication process is simple and user-friendly, but the system is vulnerable to fraud and unauthorized access
Solution Approach 1:
The authentication process is segmented into multiple independent verification steps: first verifying the identifier and password, then separately verifying the terminal identifier against stored information, and finally generating an access parameter. This segmentation allows each verification step to be performed independently, enhancing security without creating a single complex monolithic authentication mechanism.
Solution Approach 2:
The system performs preliminary verification of the terminal identifier before granting full access. By checking whether the terminal identifier matches stored information associated with the user's identifier and password, the system establishes an additional security layer in advance, preventing fraudulent access before it can occur.
2Ease of operation
If session cookies are used to simplify user experience, then users can access services without repeatedly entering credentials, but the terminal or session cookie stored on the terminal may be stolen leading to complete fraud
Solution Approach 1:
The system implements continuous feedback verification by checking the terminal identifier against stored information during the authentication process. This feedback mechanism ensures that even if a session cookie is stolen, the fraudulent user cannot complete authentication without the correct terminal identifier matching the stored information associated with the legitimate user's credentials.
Solution Approach 2:
The terminal identifier verification acts as an intermediary security layer between the session cookie and the authentication system. This intermediary check prevents direct access to services using only a stolen session cookie, as the terminal identifier must also match the stored information, breaking the fraud chain.
3Reliability
If fraudsters obtain identifier and password through phishing, then they can access user accounts and redirect notification messages, but the invention adds terminal verification to prevent this
Solution Approach 1:
The verification system is segmented into distinct components: credential verification (identifier and password), terminal verification (comparing terminal identifier with stored information), and access parameter generation. This segmentation allows the system to add robust fraud prevention through terminal verification without creating a single overly complex verification monolith, making the system more manageable and maintainable.
Solution Approach 2:
The system performs preliminary terminal verification before completing authentication, even when credentials are provided. By checking the terminal identifier against stored information in advance, the system prevents fraudulent access attempts before they can succeed, adding a proactive security layer that stops phishing-based attacks at the terminal verification stage.
Data Source
AI summary
A method for configuring access to an Internet service, the method being implemented by a server known as a web server following at least one successful authentication request by a user to access the service, the at least one authentication request being initiated by a terminal of the user. The method includes: a first step of obtaining at least one identifier of the terminal and at least one authentication datum that are present in the at least one authentication request; a second step of obtaining, on the basis of the at least one obtained authentication datum, at least one identifier of the user; a third step of obtaining, on the basis of the at least one identifier of the user and of the at least one identifier of the terminal, at least one access parameter; and a step of configuring the service for the user on the basis of the at least one access parameter.