B2B Platform Login Security via Official Email Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In B2B service platforms, there is a security risk due to oversight in managing login privileges after a company staff member resigns, allowing them to potentially continue accessing the platform.
Innovation Solution
A business official email box based security verification method that involves verifying employee accounts and passwords, transmitting login verification codes to associated email boxes, and requiring input of these codes for successful login, while also managing email box changes through verification codes and ensuring timely receipt of codes to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If employee account and password verification is used for login, then login convenience is improved, but security against resigned employees is insufficient
Solution Approach 1:
The patent introduces an email box as an intermediary verification channel. When an employee logs in, the system sends a verification code to their registered email box. The employee must retrieve this code from their email box and enter it to complete authentication. This intermediary step ensures that even if a resigned employee retains their account credentials, they cannot access the system without access to their email box, which would have been revoked upon resignation.
2Reliability
If email box verification code is required for login, then security is improved, but login process complexity increases
Solution Approach 1:
The system performs preliminary actions by pre-configuring the employee's email box as their unique verification channel before login occurs. The email box is registered and bound to the employee account in advance. During login, the system automatically sends the verification code to this pre-configured email box, eliminating the need for complex real-time verification procedures. The employee simply needs to retrieve the code from their email and enter it, making the process straightforward despite the enhanced security.
3Adaptability or versatility
If email box change is allowed without strict verification, then operational flexibility is improved, but security risk increases
Solution Approach 1:
The patent implements a feedback mechanism for email box changes. When an employee requests to change their email box, the system sends a verification code to their current (old) email box. The employee must retrieve this code from their existing email box and submit it to complete the change. This feedback loop ensures that only the legitimate owner of the current email box can initiate and complete the change process, preventing unauthorized modifications even though the system allows flexible email box changes.
Data Source
AI summary
A business official email box based B2B service security verification method, includes: a service platform receiving an employee account and a password inputted by a business employee, and verifying whether the employee account and the password are legal or not; if yes, transmitting a log-in verification code to a business official email box to which the employee account corresponds; the service platform receiving a verification code inputted by the business employee, and determining whether the verification code is the log-in verification code or not; and if yes, the employee account successfully logging in the service platform. The present invention uses the association between the business employee and the business official email box in order to verify the identity of the business employee by means of the business official email box, and effectively prevent a resigned employee from logging in the service platform to improve the security of the platform.