Multi-factor Authentication Code Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-factor authentication methods are vulnerable to compromise due to the potential for one-time codes to be sent to multiple devices or be intercepted, compromising the assumption that the device receiving the code is in the user's possession, and do not adequately address instances of device cloning or unauthorized access.
Innovation Solution
An authentication platform dynamically generates a plurality of codes, including a correct authentication code and decoy codes, which are transmitted to a user's device, requiring the user to identify the correct code based on user-specific attributes or instructions, thereby enhancing security and detecting potential fraud or malicious attempts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If one-time codes are sent to multiple devices or can be intercepted, then the authentication system becomes more accessible and easier to operate, but the security reliability is compromised
Solution Approach 1:
The authentication code is segmented into multiple individual codes presented to the user. Instead of providing a single authentication code, the system generates and displays multiple separate codes (e.g., Code 1, Code 2, Code 3), requiring the user to select the correct one based on additional instructions or attributes. This segmentation prevents unauthorized access even if some codes are intercepted or guessed, as each individual code has limited validity.
Solution Approach 2:
The patent introduces an intermediary layer between code transmission and authentication validation. The system sends multiple codes through a communication channel to the user's device, but the actual authentication depends on the user's ability to correctly identify which code to use based on additional instructions or attributes provided. This intermediary step (code selection process) adds security without compromising the ease of receiving codes through standard communication channels.
2Reliability
If multiple codes are generated and transmitted to the user's device, then the security against unauthorized access is improved, but the device complexity and processing requirements increase
Solution Approach 1:
The authentication code is segmented into multiple individual codes presented to the user. Instead of providing a single authentication code, the system generates and displays multiple separate codes (e.g., Code 1, Code 2, Code 3), requiring the user to select the correct one based on additional instructions or attributes. This segmentation prevents unauthorized access even if some codes are intercepted or guessed, as each individual code has limited validity.
Solution Approach 2:
The system changes the parameter of code quantity from one to multiple, and introduces additional parameters such as code attributes or selection instructions. By varying these parameters (number of codes, types of codes, selection criteria), the system enhances security while managing complexity through structured parameter management rather than unstructured system complexity.
3Measurement precision
If the system verifies user identity by comparing credentials with user profile, then the authentication accuracy is improved, but the processing time and computational resources increase
Solution Approach 1:
The system performs preliminary actions by pre-generating multiple authentication codes and pre-establishing user profiles with associated attributes before the actual authentication event. When authentication is required, the system retrieves pre-prepared codes and compares user input against pre-stored credentials, reducing real-time computational burden while maintaining high verification accuracy through pre-computed comparison data.
Data Source
AI summary
A device may receive a request from a first user device to access a protected device. The device may verify a user identity of a user of the first device based on user credentials and determine that an authentication code is needed to authenticate the request to access the protected device. The device may dynamically generate multiple codes and transmit the multiple codes to a second user device associated with the user identity of the user of the first device. A first code, of the multiple codes, may correspond to a correct authentication code needed to authenticate the request to access the protected device. The device may transmit a message including an instruction for identifying the correct authentication code from among the multiple codes, receive a second code from the first device, compare the second code and the first code, and selectively authenticate the request to access the protected device.