Conditional TOTP Seed Issuance via Device Posture Evaluation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authenticator applications face security concerns as seeds used for generating time-based one-time passwords (TOTPs) are stored locally on devices, making them vulnerable to attacks if the device is compromised, jailbroken, or rooted.
Innovation Solution
The proposed solution involves evaluating the security of the client device using mobile threat defense signals or a device posture summary before generating a seed, ensuring the security of connected systems. If the device is deemed insecure, remedial actions such as revoking the seed or preventing further TOTP generation can be taken.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If seeds are stored locally on user devices for TOTP generation, then authentication functionality is enabled and user convenience is improved, but device security vulnerabilities increase and seed compromise risk increases
Solution Approach 1:
The system performs preliminary security evaluation of the device posture before generating or providing seeds to authenticator applications. This preventive measure checks for jailbreaks, root access, and other security vulnerabilities beforehand, blocking seed generation on compromised devices while allowing normal operation on secure devices.
Solution Approach 2:
An intermediary security evaluation layer is introduced between the device hardware and the authenticator application. This layer assesses device posture and security status, acting as a gatekeeper that determines whether seeds should be generated or existing seeds should be revoked, without requiring changes to the core TOTP generation mechanism.
2Productivity
If seeds are generated on devices with potential security issues, then authentication access is maintained, but system security is compromised and unauthorized access risk increases
Solution Approach 1:
The system applies preliminary anti-action by proactively identifying and blocking potential security threats before they can compromise authentication. By evaluating device posture and detecting security vulnerabilities in advance, the system prevents seed generation on compromised devices, countering potential attacks before they occur.
Solution Approach 2:
The system implements continuous feedback loops that monitor device posture and security status. When security issues are detected, the system responds by revoking existing seeds or preventing new seed generation, creating a dynamic security mechanism that adapts to changing device conditions and maintains system integrity.
Data Source
AI summary
Disclosed are various embodiments for conditional time-based one time password token issuance based on locally aggregated device risk. Embodiments of this application can evaluate the security of the client device using mobile threat defense signals or a device posture summary before generating a seed on the client device to ensure the security of all the connected systems as a whole. Additionally, embodiments of this application can evaluate the security of the client device to determine if changes have been made that require a remedial action to be taken. In some embodiments, the client device may be completely disconnected from the network and capable of generating time-based one time passwords, while remaining offline. However, offline attacks may still occur; in such a situation, the client device can determine the security of the device and perform the remedial actions independent of other devices, systems, computing environments, or networks. In at least another embodiment, when the client device is determined to not be secure, the client device can inform the authentication service over a connected network that security issues may exist in the client device and actions may need to be taken at the authentication service to ensure the client does not further compromise the account.