Alternative OTP Distribution When Primary Devices Are Unavailable
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication systems face challenges in delivering One-Time Passwords (OTPs) when the user's designated device is not proximate, inoperable, or located in a geo-location where OTP receipt is undesirable, leading to security concerns or high costs.
Innovation Solution
A system that detects triggering events and redirects OTPs to alternative communication devices, such as family members' or trusted individuals' devices, based on proximity or user-defined lists, ensuring OTP delivery even when the primary device is unavailable or inoperable.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If OTP is delivered to the user's designated mobile device, then authentication security is improved, but the system becomes vulnerable when the device is unavailable, inoperable, or located in restricted geo-locations
Solution Approach 1:
The patent introduces a communication device other than the user's primary mobile device as an intermediary to receive and transmit the OTP. This intermediary device acts as a backup channel that can deliver the authentication code when the primary device is unavailable, ensuring continuous authentication capability without compromising security.
Solution Approach 2:
The system dynamically changes the delivery parameter by switching from the primary mobile device to an alternative communication device based on triggering events such as device unavailability, inoperability, or restricted geo-locations. This parameter change enables the system to adapt to varying operational conditions while maintaining authentication reliability.
2Ease of operation
If OTP is delivered via cellular network when user is outside local coverage area, then authentication can proceed, but roaming rates and communication costs increase
Solution Approach 1:
The patent uses an intermediary communication device that is not the user's primary mobile device to deliver the OTP. This intermediary device can be located in a region with better network coverage or lower roaming costs, reducing the communication expenses associated with delivering authentication codes to users traveling outside their local network area.
3Ease of operation
If OTP is delivered to device communicating over unsecured Wi-Fi network, then authentication can be completed, but security is compromised due to possible interception
Solution Approach 1:
The patent introduces an intermediary device that serves as a secure alternative to the user's mobile device for OTP delivery. This intermediary device can be positioned in a location with more secure network infrastructure, reducing the risk of OTP interception while still enabling authentication to proceed smoothly.
Solution Approach 2:
The system detects when the primary device is in a potentially insecure situation (such as being offline or in a restricted location) and converts this harmful condition into a beneficial outcome by automatically redirecting the OTP delivery to an alternative device that is in a more secure or suitable position to receive the code.
4Reliability
If system checks device availability and redirects OTP delivery, then delivery reliability is improved, but system complexity increases
Solution Approach 1:
The patent implements preliminary checks of the primary device's availability, operational status, and geo-location before initiating OTP delivery. By performing these checks in advance, the system can proactively redirect to an alternative device if the primary device is unsuitable, improving delivery reliability without requiring complex real-time monitoring during the authentication process.
Data Source
AI summary
Alternative distribution/communication of and access to One-Time Passwords/Passcodes (OTPs). Triggering events are detected that result in the OTP being communicated to a communication device different from the device designated by the user for receiving OTPs. The triggering event may be determination that the user's designated device (i) is not currently in possession of the user, (ii) is located in a geo-location designated for No-OTP receipt, and/or (iii) is currently in an inoperable state. The different communication device may be a device other than one in possession/control of the user and may be a device designated by the user or the device may be one selected, based on proximity of location to the user, from a network of trusted devices/individuals.


