Authentication System Dummy System Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In existing authentication systems, when biometric authentication fails despite successful identification information authentication, unauthorized users can exploit this by attempting workarounds, compromising system security.
Innovation Solution
The system performs log-in processing on an authorized system when authentication is successful and on a dummy system when authentication is unsuccessful, thereby preventing unauthorized access and enhancing security by providing a separate, limited access environment for unsuccessful authentication attempts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric authentication is implemented alongside identification information authentication, then authentication security is improved, but unauthorized users can still attempt workarounds when biometric authentication fails
Solution Approach 1:
A dummy system is introduced as an intermediary between the authentication failure and the actual system. When authentication fails, users are redirected to the dummy system which mimics the real system's interface but provides no actual access. This mediator conceals the authentication failure from unauthorized users, preventing them from recognizing and attempting workarounds around the biometric authentication mechanism.
Solution Approach 2:
The system changes the apparent state or 'color' of the authentication outcome. Instead of showing a clear failure state that reveals the biometric authentication was attempted and failed, the system presents a success-like state by redirecting to the dummy system. This obscures the actual authentication result, making it difficult for unauthorized users to determine what authentication methods are in use and how to bypass them.
2Reliability
If multiple authentication methods are used, then system security is enhanced, but system complexity increases
Solution Approach 1:
A dummy system is created as a copy of the real system's user interface and interaction flow. This copy maintains the same appearance and basic functionality for unauthorized users, allowing the real authentication system to remain complex and secure while the dummy copy handles failed authentication attempts. The copying principle allows the system to maintain security through multiple authentication methods without exposing their complexity to users.
Data Source
AI summary
An information processing system according to the present invention includes: a storage device; and at least one processing device coupled to the storage device, the processing device performing operations, the operations includes: acquiring authentication information; performing authentication processing on the acquired authentication information; and performing log-in processing according to an authentication processing result, wherein the operation further includes: performing log-in processing on an authorized system when authentication processing is successful, and performing log-in processing on a dummy system different from the authorized system when authentication processing is unsuccessful.