Contextual Login Authentication for Secured Information Systems

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing information systems face challenges in ensuring the security and safety of user data while optimizing technical operations, particularly in preventing unauthorized access through electronic portals.

Innovation Solution

Implementing authentication techniques that utilize contextual login information, including device selection and one-time passcodes, to evaluate and validate user access requests, executing security procedures when devices are out of context, and generating validation messages for authorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional authentication methods are used, then ease of operation is improved, but reliability deteriorates due to increased unauthorized access risk

Engineering Contradiction:
Improveauthentication convenienceVSAvoidaccess security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary evaluation of device selection input against contextual login information before granting authentication. By pre-assessing whether the selected device matches expected contextual patterns (such as frequently used devices, device types, or registration status), the system can identify suspicious selections and trigger additional security procedures in advance, preventing unauthorized access while maintaining smooth authentication for legitimate users.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback by continuously monitoring device selection patterns and comparing them against stored contextual login information. When a device selection deviates from expected patterns, the system provides feedback through additional security challenges or authentication requirements. This feedback mechanism dynamically adjusts authentication strictness based on real-time contextual analysis, balancing security with user convenience.

Inventive Principle:
Principle #23Feedback

2Reliability

If contextual evaluation and security procedures are implemented, then reliability is improved, but device complexity increases

Engineering Contradiction:
Improveaccess securityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system applies local quality by implementing contextual evaluation and security procedures selectively rather than uniformly. Instead of requiring complex security checks for every authentication attempt, the system evaluates device selection input against contextual login information and only triggers additional security procedures when the device selection appears suspicious or out of context. This localized application of security measures reduces overall system complexity while maintaining high reliability.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system employs partial action by implementing security procedures only when necessary based on contextual evaluation. Rather than always requiring multiple authentication factors or extensive verification steps, the system applies security measures proportionally to the risk level indicated by the device selection analysis. This approach maintains simplicity for low-risk authentications while providing enhanced security when contextual patterns suggest potential unauthorized access.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS10158628B2Preventing unauthorized access to secured information systems based on contextual login information
Publication Date: 2018.12.18 BANK OF AMERICA CORP
  • US10158628B2 patent drawing
  • US10158628B2 patent drawing
  • US10158628B2 patent drawing

AI summary

A computing platform may receive, from a client server, a request to authenticate a user to a user account, as well as device selection input selecting a registered device to receive a one-time passcode. The computing platform may evaluate the device selection input based on contextual login information associated with the user account, determine that the registered device selected to receive the one-time passcode is out of context, and execute a security procedure. Based on validating a response to the security procedure, the computing platform may generate a one-time passcode and may send the one-time passcode to the registered device selected to receive the one-time passcode. Thereafter, the computing platform may receive one-time passcode input, validate the one-time passcode input, generate a validation message directing the client server to provide the user with access to the user account, and send the validation message to the client server.