Continuous Authentication for Secure Data Migration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional security systems fail to ensure continuous authentication during data transfer between devices, leading to potential unauthorized access, especially with the increased number of user devices associated with a single user, such as smartphones and tablets.
Innovation Solution
The system continuously authenticates users by receiving and comparing video streams from multiple devices associated with the same user, using baseline attributes and video consistency thresholds to verify identity and halt data transfer if thresholds are not met.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single initial authentication procedure is used during session establishment, then the ease of operation is improved, but the reliability of security is worsened because the system fails to ensure continuous authentication during data transfer
Solution Approach 1:
The system implements continuous authentication by repeatedly performing authentication checks throughout the data transfer session using video streams from multiple devices. This ensures that security verification is not a one-time event but an ongoing process that maintains reliability while allowing the session to continue operating smoothly.
Solution Approach 2:
The system uses video streams from multiple devices to continuously verify user identity and provides feedback on authentication status. If the video analysis indicates unauthorized access or device compromise, the system can terminate the session, creating a feedback loop that maintains security throughout the data transfer process.
2Adaptability or versatility
If multiple devices are associated with a single user to enable data migration, then the adaptability is improved, but the risk of unauthorized data transfer is worsened
Solution Approach 1:
The system introduces video stream analysis as an intermediary verification layer between the user and the data migration process. By analyzing video streams from multiple devices to confirm user identity, the system creates an additional security checkpoint that prevents unauthorized access even when multiple devices are associated with a single user.
Solution Approach 2:
The system performs preliminary video-based authentication verification before allowing data migration between devices. This preliminary action ensures that only authorized users can initiate or receive data transfers, reducing the risk of unauthorized access while maintaining the ability to use multiple devices.
3Reliability
If video stream comparison with multiple thresholds is implemented for continuous authentication, then the reliability of security is improved, but the device complexity is worsened
Solution Approach 1:
The authentication system is segmented into distinct functional components: video stream acquisition from multiple devices, video analysis for attribute extraction, threshold comparison logic, and authentication decision-making. This segmentation allows each component to be optimized independently and simplifies the overall system architecture despite the increased functionality.
Data Source
AI summary
Methods, apparatuses, and computer program products are disclosed for securely migrating data between devices. An example method includes receiving a request at a first time for data migration between a first user device and a second user device each associated with a first user. The method further includes retrieving a baseline attribute dataset associated with the first user generated before the first time and generating a first attribute dataset associated with the first user. The method includes authenticating a session between the first user device and the second user device at the first time and causing data transfer between the first user device and the second user device. The method further includes generating a second attribute dataset associated with the first user at a second time after the first time and authenticating the session at the second time based on the first attribute dataset and the second attribute dataset.