Write-and-compare-only memory partition for authentication data protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Unauthorized users can exploit hashed authentication data by cracking hashes, leading to identity theft and unauthorized access, as existing systems do not adequately protect hashed authentication data from theft and cracking.
Innovation Solution
Implementing a write-and-compare-only partition on a data storage drive where verified authentication data is stored, allowing only match confirmations or errors to be returned, preventing the hashed data from being read and thus protecting it from theft and cracking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hashed authentication data is stored in a readable format for verification, then authentication functionality is enabled, but the data becomes vulnerable to theft and cracking attacks
Solution Approach 1:
The storage system is segmented into multiple partitions with different access permissions. The authentication data is stored in a specific partition that allows write and compare operations but prevents read operations, thereby separating the verification function from data exposure.
Solution Approach 2:
A specialized storage partition acts as an intermediary between the authentication request and the stored data. This partition enables comparison operations without exposing the actual data, mediating between security requirements and authentication functionality.
2Ease of operation
If hashed authentication data is made readable for comparison, then verification operations can be performed, but the data can be copied and cracked offline
Solution Approach 1:
The storage medium is divided into partitions with granular access controls. One partition stores authentication data with write-and-compare-only permissions, preventing data extraction while enabling verification operations through controlled comparison access.
3Adaptability or versatility
If traditional read-write storage is used for authentication data, then data can be accessed and verified, but security against offline cracking is compromised
Solution Approach 1:
Different partitions of the storage system have different access qualities. The authentication data partition is configured with write-and-compare-only permissions, creating a localized security zone that maintains operational flexibility while providing enhanced protection against data theft.
Data Source
AI summary
The presently disclosed technology is directed to combatting data theft, particularly of verified authentication data (or hashes thereof) such as login information, thumbprint data, digital signatures, identification numbers, and any other data that should be known to an accessor of stored data. The verified authentication data is initially saved for later comparison in a new type of memory, write-and-compare-only memory, where the data may be queried as to whether a to-be-verified value matches the stored verified value, but the stored and verified data is not read from the write-and-compare-only memory. This prevents a data breach by preventing the verified authentication data from being read by anyone, including those with access (whether legitimate or illegitimate) to any system connected to the write-and-compare-only memory.