Chatbot Authentication Context Transfer Across Secure Sessions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users experience a clunky and inconvenient transition when switching between non-secure and secure sites within a chat-bot interface, requiring a new conversation each time, which disrupts the authentication process.
Innovation Solution
A chat-bot assisted authentication method and system that allows seamless information relay between un-authenticated and authenticated spaces by generating a unique token containing user input and authentication credentials, enabling access to authenticated spaces and facilitating responses based on the token.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a user transitions from a non-secure site to a secure site within a chat-bot interface, then authentication security is improved, but user convenience deteriorates due to requiring a new conversation
Solution Approach 1:
The system performs preliminary actions by capturing and storing user input context before authentication occurs. The chat-bot interface saves the conversation history and user intent in a secure manner, so that when the user is authenticated and transitions to the secure site, the context is already prepared and can be seamlessly transferred without requiring the user to restart their conversation.
Solution Approach 2:
A context transfer mechanism acts as an intermediary between the non-secure chat-bot interface and the authenticated secure space. This intermediary component preserves the conversation context, user input, and chat-bot state, allowing seamless transfer of information across the authentication boundary without requiring users to repeat themselves or start new conversations.
2Reliability
If authentication credentials are required to access secure spaces, then security is improved, but the authentication process becomes more complex and time-consuming
Solution Approach 1:
The authentication process is merged with the existing chat-bot interaction flow. Instead of separating authentication into a distinct, complex process, the system integrates credential collection and verification within the familiar chat interface, allowing users to authenticate naturally as part of their conversation rather than as a separate procedural step.
Solution Approach 2:
The system enables self-service authentication where users can provide their credentials directly through the chat interface without requiring additional authentication systems or complex verification procedures. The chat-bot guides users through the authentication process naturally, allowing them to authenticate using their existing credentials in a streamlined manner.
3Reliability
If a new conversation is started on the secure site, then authentication is ensured, but information continuity is lost
Solution Approach 1:
A context transfer mechanism acts as an intermediary that captures, preserves, and transfers conversation context from the non-secure chat-bot interface to the authenticated secure space. This intermediary ensures that user input, chat-bot responses, and conversation state are maintained across the authentication boundary, preventing information loss while still ensuring proper authentication.
Solution Approach 2:
The system performs preliminary actions by securing and storing conversation context before authentication occurs. The chat interface captures user input and chat-bot responses in advance, preparing them for transfer to the secure environment, so that when authentication completes, the conversation can continue seamlessly without loss of information.
Data Source
AI summary
Systems and methods for chat-bot assisted authentication are disclosed. The system performing the steps of: receiving, from a user within an application, user input in the form of written language or audible language; receiving a request, from the user, to access an authenticated space within the application; requesting, from the user, user authentication credentials; receiving, from the user, the user authentication credentials; generating a unique token, the unique token comprising the user input and the user authentication credentials; requesting access to the authenticated space, wherein requesting access comprises presenting the unique token; and receiving access to the authenticated space. The system may further send a response to the user based on the user input from the unique token. The system may using natural language processing and/or other machine learning processing to analyze the user's requests.