Contextual Transaction Authentication With JIT Access Approval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern cyber transactions face security breaches and unauthorized intrusions due to excessive or misused access permissions, which can lead to data theft and system disruption.
Innovation Solution
A system that uses passkeys for real-time identity verification and just-in-time (JIT) approval templates to validate user actions, ensuring that additional approvers review and approve actions before they are executed, incorporating dynamic access controls and multi-factor authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If passkeys are used for real-time identity verification at multiple time points during online transactions, then security against unauthorized intrusion is improved, but system complexity increases due to multiple authentication layers
Solution Approach 1:
Passkeys are pre-configured and stored securely in the user's device before the transaction occurs. The system performs preliminary identity verification by checking the passkey against the expected value during the transaction flow, rather than requiring full authentication credentials at each step. This preliminary setup enables quick, secure verification without complex real-time authentication protocols.
Solution Approach 2:
The passkey acts as an intermediary credential between the user and the system. Instead of directly transmitting sensitive authentication information or requiring complex multi-factor authentication protocols, the passkey serves as a secure intermediate layer that verifies identity without exposing underlying credentials or requiring complex verification chains.
2Reliability
If JIT approval templates are implemented to require additional approvers for user actions, then unauthorized access is mitigated, but transaction processing time increases
Solution Approach 1:
The approval requirements are dynamic rather than static. The system automatically adjusts whether JIT approval is needed based on contextual factors such as transaction amount, user behavior patterns, time of day, and risk assessment. Low-risk transactions can proceed with standard authentication, while only high-risk operations trigger additional approval requirements, optimizing both security and processing speed.
Solution Approach 2:
The system changes approval parameters dynamically based on transaction characteristics. Different transaction types, amounts, and risk levels trigger different approval thresholds and approver requirements. This parameter-based approach ensures that routine transactions are processed quickly while maintaining appropriate security controls for exceptional cases.
3Reliability
If time-based and approval-based role activation is implemented, then access permission misuse is reduced, but device complexity increases due to dynamic access controls
Solution Approach 1:
Access permissions are activated periodically based on predetermined time schedules and triggers. Rather than maintaining continuous complex access control evaluations, the system activates specific roles and permissions at specific times or events (e.g., during business hours, upon specific transaction types, or at scheduled intervals). This periodic activation simplifies the access control mechanism while maintaining security through time-based constraints.
Data Source
AI summary
A method for providing users with a time-based and approval-based role activation for online transactions, to mitigate the risks of excessive, unnecessary, or misused access permissions on resources, is disclosed. More specifically, the method is a revolutionary, highly secure solution tailored to provide an impenetrable shield for AWS (Amazon Web Services) cloud computing environment against unauthorized intrusion and potential security breaches with a system that incorporates identity verification protocols, multi-factor authentication, and dynamic access controls. Accordingly, the method enables easy registration of a company, securing applications, setting up end users, providing endpoint protection, integrating identity providers, integrating native languages, creating, managing and monitoring JIT policies and activity logs, and enabling and executing JIT approvals for the company's transactions.