Behavior Parameter Authentication via Native Protocol Digital Objects
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods for electronic services fail to account for user behavior parameters when accessing digital objects through client applications, leading to potential unauthorized access.
Innovation Solution
A system and method that includes a server configured to receive user account data and behavior parameters, comparing them to stored profiles, and initiating a verification routine if parameters mismatch, using a digital object with an indication of the verification routine transmitted via a native protocol to the client application, which can perform the routine through a non-native protocol, such as HTTP or HTTPS.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If verification routines are implemented for web interface access, then security against unauthorized access is improved, but device complexity and operational difficulty worsen for client applications
Solution Approach 1:
The system automatically performs verification by comparing behavior parameters against stored profiles without requiring user intervention. The server autonomously determines whether verification is needed and executes the appropriate verification routine, making the security process self-service rather than user-driven.
Solution Approach 2:
Behavior parameters serve as an intermediary layer between authentication and verification. Instead of directly implementing complex verification routines, the system uses behavior parameters (IP address, geolocation, device information) as a mediator to automatically assess risk and trigger verification only when necessary, simplifying the overall process.
2Reliability
If behavior parameter monitoring is implemented, then unauthorized access detection is improved, but loss of information and processing overhead worsen
Solution Approach 1:
The system monitors only essential behavior parameters (IP address, geolocation, device information) rather than all possible user actions. This partial monitoring approach provides sufficient unauthorized access detection capability while minimizing information processing overhead and avoiding excessive data collection.
3Reliability
If additional verification routines are required, then security against hacking is improved, but user experience and access speed worsen
Solution Approach 1:
The verification requirement is dynamic rather than static. The system adjusts whether verification is needed based on real-time behavior parameter analysis. For recognized patterns matching stored profiles, access is granted immediately without verification. For anomalous patterns, verification is dynamically triggered, optimizing both security and access speed based on current conditions.
Solution Approach 2:
The system changes the verification parameter state based on behavior analysis. When behavior parameters match established patterns, the verification parameter is set to false (no verification needed). When parameters deviate from patterns, the verification parameter is set to true (verification required), allowing the system to adapt security measures to actual risk levels.
Data Source
AI summary
A method of and a system for user authentication in an electronic service for transmitting digital objects, the electronic service accessible by a client device via a client application, the client application associated with at least one native network protocol. The method includes receiving a request for access to a user profile in the electronic service, including user account data and at least one user behavior parameter; responsive to at least one user behavior parameter being different from the user behavior parameters stored in the user profile, creating a digital object with an indication of a verification routine; transmitting the digital object via the native network protocol to the client application, the digital object configured to cause the client device to perform the verification routine via at least one non-native network protocol; responsive to the verification routine rendering a positive outcome, granting access to the user profile.