Skip to main content

Simplified Password Authentication

Photo Courtesy : eset.com


I propose a simple method for Authenticating both Web and non Web - based application, which requires passwords. I am proposing a solution for easy way to solve complex authentication procedures, which requires passwords. This proposed idea requires you to remember a single digit. The advantage of this method is that it does not require you to remember or write your password anywhere, preventing theft using key loggers, phishing or any such fraudulent ways.

● Password authentication for web based application which is used in websites and Applications

● Password authentication for non web based applications which is used in standalone devices

Password authentication for web based application which is used in websites and Applications

To begin with, users need to choose a number from 1 to 9. This can be referred as MyPasswordDigit. Next, this idea needs you to create a method, according to each and everyone’s natural analytical abilities. This method is configured by the user. This method can be created in Authenticator Provider Software, which uses simple blocks for novice users to complex programs for advanced users. This method can be referred to as Authentication Method. This Authentication Method takes a random 5 digit input generated by the website application, which needs authentication. The website sends the website URL, Username and 5 digit input to Authenticator Provider Software, which has the Authentication method, created by the user. ( Website URL, UserName, FiveDigitInput)

Example :

( www.microsoft.com, deepakkumar.t.a@outlook.com, 87130 )

This Authentication Method takes MyPasswordDigit to calculate the GeneratedPassword which is the password for that particular application, for that Input Trio ( Website URL, UserName, FiveDigitInput).

Input Trio — > Authentication Method configured in Authenticator Provider Software — >GeneratedPassword.

When a website wants authentication, it first asks the user, the UserName. Then finds the Authenticator Provider Software accepted by that particular user, allowed by the website and already configured by the user, when creating UserName. The Authenticator Provider Software takes the Input Trio and opens a Window, in case of Website or Application Software.

Match GeneratedPassword === EnteredInputPassword

This GeneratedPassword is calculated by the Authenticator Provider Software and is matched with the EnteredInputPassword given as input to the Authenticator Provider Software. If matched, Authenticator Provider Software sends Accept or Reject Signal to the Website, which sent the Input Trio.

Authentication Method

Now, let us get into the intricacies of creating such methods. This method is configured in Authenticator Provider Software, by the user. This method takes FiveDigitInput as input from the Website and calculates the GeneratedPassword. This GeneratedPassword is matched with the EnteredInputPassword, entered by the user in the Authenticator Provider Software. If a match is found, Authenticator Provider Software sends Accept or Reject Signal to the Website.

We will examine the Method, with following Examples

1. Same number of digits for both FiveDigitInput and GeneratedPassword.

2. Different number of digits for FiveDigitInput and GeneratedPassword.

3. Drop digits from GeneratedPassword.

4. Make MyPasswordDigit as positions to select the output digits from the FiveDigitInput to obtain the GeneratedPassword.

There are unlimited number of possibilities to create such methods.

Same number of digits for both FiveDigitInput and GeneratedPassword.

Let us consider the following tuple as input to the Authentication Method configured in Authenticator Provider Software.

( www.microsoft.com, deepakkumar.t.a@outlook.com, 87130 )

FiveDigitInput is ( 87130 )

MyPasswordDigit is ( 2 )

Authentication Method is Add MyPasswordDigit to all digits of FiveDigitInput

We also need to know the arithmetic required to calculate the GeneratedPassword.

If the result of calculation for any output digit is not a single digit number, consider the last digit of that number. Example for the FiveDigitInput ( 87130 ), the GeneratedPassword is ( 8+2, 7+2, 1+2, 3+2, 0+2 ). For first place 8+2, the output is 10. Here, take the last digit of the output 0, instead of 10.

GeneratedPassword is ( 0, 9, 3, 5, 2 ).

If the result of calculation for any output digit is a negative digit, take the modulus of the number. Example

FiveDigitInput is ( 58241 )

MyPasswordDigit is ( 3 )

Authentication Method is Subtract MyPasswordDigit from all digits of FiveDigitInput

For the FiveDigitInput ( 58241 ), the GeneratedPassword is ( 5-3, 8-3, 2-3, 4-3, 1-3 ). For 2-3 and 1-3 the output is negative, take the modulus of that number.

GeneratedPassword is ( 2, 5, 1, 1, 2 ).

If the result of calculation for any output digit is a fraction, take the first digit after the decimal point. Example

FiveDigitInput is ( 84630 )

MyPasswordDigit is ( 3 )

Authentication Method is to divide each digit of FiveDigitInput by MyPasswordDigit.

For the FiveDigitInput ( 84630 ), the GeneratedPassword is ( 8/3, 4/3, 6/3, 3/3, 0/3 ). For 8/3 and 4/3 the first digit after the decimal point is 6 and 3

GeneratedPassword is ( 6, 3, 2, 1, 0)

Different number of digits for FiveDigitInput and GeneratedPassword

Let us consider the following tuple as input to the Authentication Method configured in Authenticator Provider Software.

( www.microsoft.com, deepakkumar.t.a@outlook.com, 87130 )

FiveDigitInput is ( 87130 )

MyPasswordDigit is ( 2 )

Authentication Method is Add MyPasswordDigit to all digits of FiveDigitInput

Example for the FiveDigitInput ( 87130 ), the GeneratedPassword is ( 8+2, 7+2, 1+2, 3+2, 0+2 ). For first place 8+2, the output is 10. Here, keep all the digits of the output 10. Even though, our input is five digit, the output is 6 digits.

GeneratedPassword is ( 10, 9, 3, 5, 2 ). i.e ( 109352 )

Drop digits from GeneratedPassword

Let us consider the following tuple as input to the Authentication Method configured in Authenticator Provider Software.

( www.microsoft.com, deepakkumar.t.a@outlook.com, 87130 )

FiveDigitInput is ( 87130 )

MyPasswordDigit is ( 2 )

Authentication Method is to drop the digit if it is multiples of 2 and replace it with 50

Example for the FiveDigitInput ( 87130 ), the GeneratedPassword is ( 50,7,1,3,0 ). i.e. ( 507130 )

Make MyPasswordDigit as positions to select the output digits from the FiveDigitInput to obtain the GeneratedPassword

Let us consider the following tuple as input to the Authentication Method configured in Authenticator Provider Software.

( www.microsoft.com, deepakkumar.t.a@outlook.com, 87130 )

FiveDigitInput is ( 87130 )

MyPasswordDigit is ( 2 )

Authentication Method is to select the multiples of 2 positions and add 1 to it.

Example for the FiveDigitInput ( 87130 ), Find the second and fourth positions of FiveDigitInput and add 1 to it. The GeneratedPassword is ( 8, 7+1, 1, 3+1, 0). i.e ( 8,8,1,4,0 )

There are innumerable ways by which we can configure the Authentication Method like Jumble the digits. The trick lies in creating innovative method, which need not be complex. Deciphering the method is impossible even for Quantum Computers.

The Authenticator Provider Software receives the input tuple ( Website URL, UserName, FiveDigitInput) from the Website, which sends the FiveDigitInput hidden to the user, as far as Website is concerned. So, Even if someone catches hold of Authenticator Provider Software, he still needs FiveDigitInput. Also, even if the intruder gets hold of Website, he still needs the Authenticator Provider Software, to log in.

As usual, the user should be allowed only three wrong attempts. Same user can hold different passwords or Authentication Methods, allowed by the Website as per the needs of the user. He can also change simply the MyPasswordDigit or Configure new Authentication Method in the Authenticator Provider Software, without changing the passwords in each and every Website. This Authentication Method can be configured in Authenticator Provider Software, for novice users, by easy building blocks provided. This method can be used for ATMs and Access Cards, by configuring those methods in control centres.

Password authentication for non web based applications, which is used in standalone devices

This can be applied in Number Locked Safety Vaults. First, we need to configure the method in Standalone devices. For that we can use digits and mathematical symbols like the characters and numbers in ATM keypads.

Payment

If you want to apply this technique to any of your application, please let me know so that we can arrange a mutually beneficial agreement on this idea. For details go to my profile and click “My Web Page” under my picture or click “How you can support us” under My Blogs. 

Or Simply Click https://supportusbydeepak.blogspot.com/

Deal

Intellectual Property Rights : Only Microsoft can write code for all my ideas. Anyone can implement my ideas giving shares in the ratio 90:10, including Microsoft ,90% profits for me. It is called MIT License.

Comments

Post a Comment

Popular posts from this blog

Security Feature for your Devices

This article is about a way to completely stop your devices from being stolen. The device can be anything from Mobile Phones to Laptops. The idea is to register your device with an Aadhaar Card when you buy it. When you lose your device, go to the service center, and give your biometric verification along with Aadhaar, like scanning your eye and giving your fingerprints. Upon receiving the complaint, the device firm will block the device, which can only be switched on when the firm gets back the device. Devices should be designed in a way, that re-installation of the Operating System, by erasing the old ones should not be allowed, when the device is blocked by the firm. Buy with Registration Whenever you buy a device, from Mobile Phones to Laptops, Even Smart TVs, Earphones, or Tablets, it should be registered with your Aadhaar Card. The process is simple, you don't need to keep records of your bill. Because most can't keep their purchase bill (Invoice) for years. All you need ...
Post a Comment
Read more

DK Cryptographic Algorithm to withstand attacks from Quantum Computers

In this article, I propose a Cryptographic Algorithm, called DK Cryptographic Algorithm, which is so reliable and robust that even Quantum Computers will not be able to break it. E very time,  data is sent as a combination of numbers from 0 to 9, between the sender and the receiver, with no clue about the content of it. Since it simply involves the jumbling of numbers between 0 and 9, it can be implemented even by the simplest devices like Mobile phones. Deepak Kumar Cryptographic Algorithm Overview This is a simple symmetric key cryptographic algorithm, which uses a simple [0-9] Decimal array to transfer data from one machine to another.  It can withstand attacks by attackers using Quantum Computers, or any other sophisticated computers. Goals The goal of this algorithm is to send a text from Machine A to Machine B, even if intruders disrupt the communication, with huge computing abilities. Specifications This cryptographic algorithm establishes communication between two Mach...
Post a Comment
Read more

Bus Timing Calculator System for Metro and Cosmopolitan City Buses

               City Buses in Metro and Cosmopolitan cities like Chennai and Bangalore need Bus Timing calculator Systems that allow them to track the timing of their buses. A passenger waiting for a bus needs to know when a particular bus will reach his bus stop so that he can plan his visit to the bus stop accordingly. He needs to know whether Bus 1 will come sooner to reach a destination or whether he can take Bus 2 through other routes to reach his destination. He needs to know how long he has to wait for a bus to come. He needs to know whether a bus will come to a bus stop or not. We need to design a Bus Tracking System that informs the customer about all these. Steps to follow to find the timings Step 1 : Install a GPS in every Bus in Metro and Cosmopolitan Cities. Most of them already have.  Step 2 : Let the bus travel on all routes as usual during the day and night and calculate the timings of the bus. The calculations are what...
Post a Comment
Read more