Authentication System Using Browsing History and Call Status

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users may inadvertently access remote services during unauthorized phone calls, view suspicious emails or websites, leading to unintended actions that waste resources and require undoing, which consumes power and processing resources.

Innovation Solution

A system that authenticates users by verifying their status regarding cellular connections or browsing history, providing warnings or additional authentication when suspicious activities are detected, and preventing unauthorized actions to conserve resources.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users access remote services during suspicious activities (unauthorized calls, suspicious emails, or websites), then service functionality is provided, but security risks increase and resources are wasted

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication process
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary checks of cellular connection status, browsing history, and email activity before completing authentication. By detecting suspicious activities in advance (ongoing calls, recent suspicious websites or emails), the system can prevent unauthorized access before it occurs, rather than reacting after the fact. This preliminary detection mechanism allows the system to block authentication attempts made during suspicious contexts while maintaining normal authentication flows for legitimate users.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If the system performs additional authentication checks and warnings, then security is enhanced, but processing time and computational resources increase

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system leverages existing device data (cellular connection status, browsing history, email activity) that is already being collected and maintained by the user's device operating system. Rather than creating new monitoring mechanisms, the patent queries existing system state information that would otherwise be unused for authentication purposes. This self-service approach minimizes additional processing overhead while enabling comprehensive suspicious activity detection.

Inventive Principle:
Principle #25Self-service

3Reliability

If users are warned or blocked during suspicious activities, then unauthorized actions are prevented, but user convenience is reduced

Engineering Contradiction:
Improvesecurity protectionVSAvoiduser accessibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system provides real-time feedback to users during the authentication process by warning them of detected suspicious activities (ongoing calls, recent suspicious websites or emails). This feedback mechanism allows users to make informed decisions about whether to proceed with authentication. The system can offer to block the suspicious activity or provide additional security measures, giving users control while protecting them from potential scams. This feedback loop maintains user convenience for legitimate operations while providing protection against unauthorized actions.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS20240364684A1Authenticating users during and after suspicious voice calls and browsing
Publication Date: 2024.10.31 CAPITAL ONE SERVICES LLC
  • US20240364684A1 patent drawing
  • US20240364684A1 patent drawing
  • US20240364684A1 patent drawing

AI summary

In some implementations, a remote server may receive a request for authentication including a set of credentials associated with a user. The remote server may transmit, to a user device associated with the user, a request for a status associated with a browsing history of the user device or associated with recent emails viewed on the user device. The remote server may receive, from the user device, an indication of the status. The remote server may transmit a message based on the indication of the status and may determine whether to authenticate the user, using the set of credentials, based on the indication of the status.