Adaptive Login Authentication Using Profile-Based Identity Signals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication systems rely solely on static credentials like usernames and passwords, which can be easily compromised, leading to unauthorized access and potential data breaches.
Innovation Solution
A security system that utilizes a user profile containing multiple data sources such as a user calendar, positioning system sensor, and biometric sensor to verify user identity, selecting a set of authentication factors based on the consistency of data from these sources, and requiring additional inputs to grant access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If static credentials (username and password) are used for authentication, then ease of operation is improved, but reliability of authentication is worsened
Solution Approach 1:
The patent transforms static authentication into a dynamic process by continuously evaluating multiple data sources (calendar, location, biometric sensors) and adjusting authentication requirements in real-time based on consistency checks, making the system adaptive rather than fixed
Solution Approach 2:
The system changes authentication parameters by selecting different sets of authentication factors based on the consistency of data from multiple sources, dynamically adjusting the strength and type of authentication required based on contextual verification results
2Reliability
If multiple data sources are verified during authentication, then reliability of authentication is improved, but device complexity is worsened
Solution Approach 1:
The patent segments the authentication process into distinct modules: data collection from multiple sources, consistency evaluation for each source, and selective authentication factor selection, allowing each component to be independently managed and processed
Solution Approach 2:
The system performs partial verification by selectively choosing which authentication factors to require based on the consistency results from data sources, rather than always requiring all possible verification methods
3Reliability
If additional authentication factors are required, then reliability of authentication is improved, but ease of operation is worsened
Solution Approach 1:
The patent applies partial action by requiring only the necessary level of authentication factors based on verification results, avoiding excessive authentication requirements when data consistency provides sufficient confidence in user identity
Data Source
AI summary
The operations of a computer program include receiving login credentials from a person using a computing device during an active login attempt to gain access to a system resource. A user profile associated with the login credentials is identified, and data is obtained from a plurality of user data sources identified within the user profile, such as a user calendar, positioning system sensor, and/or biometric sensor. For each user data source, it is determined whether the obtained data supports a conclusion that the person attempting the login is the authorized user associated with the user profile. A set of authentication factors is selected as a function of the user data sources for which the obtained data does not support the person being the authorized user. The person may be granted access to the system resource upon receiving additional input from the person satisfying the selected set of authentication factors.