Confidence-Based Application Access for Suspicious Login Activity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing applications grant all permissions after a successful login, regardless of suspicious or anomalous behavior, potentially allowing attackers full access and restricting legitimate users from accessing data and functions.
Innovation Solution
A server device determines a confidence score based on user activity observations during login attempts, adjusting access levels to applications and data based on this score to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If all permissions are granted after successful login, then user convenience is improved, but security is worsened
Solution Approach 1:
The patent implements dynamic permission adjustment based on confidence scores. Instead of static all-or-nothing permissions, the system continuously evaluates login confidence and adjusts accessible functions and data accordingly. This allows the permission level to be flexible and adaptive, resolving the contradiction between convenience and security.
Solution Approach 2:
The system changes the parameter of permission access from a binary state (full access or no access) to a graded state based on confidence score thresholds. By introducing confidence score as a variable parameter, the system can adjust the degree of access granted, simultaneously maintaining security while preserving user convenience when appropriate.
2Reliability
If confidence score-based access control is implemented, then security is improved, but system complexity is worsened
Solution Approach 1:
The patent segments functions and data into different access levels based on confidence score thresholds. By dividing the application's functionality into multiple tiers of access (full access, partial access, restricted access), the system manages complexity through structured organization rather than monolithic permission handling.
Solution Approach 2:
The confidence score acts as an intermediary mechanism between authentication and permission granting. Instead of directly linking login success to full access, the confidence score serves as a mediating evaluation that determines the appropriate access level, simplifying the decision logic while enhancing security.
Data Source
AI summary
Account permissions and data accessibility can be modified based on level of confidence for a login attempt to the account. User activity observations corresponding to one or more login attempts to access a user account can be stored. A confidence score associated with a successful login attempt of the user account can be determined. The confidence score is based on the user activity observations. A level of access to an application with functions and data for the user account can be determined. The level of access is based on the confidence score. The level of access is associated with the functions and the data that are executable and accessible subsequent to the successful login attempt.