Domain-Based Email Authentication for Mobile Service Enrollment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing multifactor authentication systems face security issues due to leaked user credentials and interception of SMS-based verification methods, particularly for international students and travelers who lack previously entered identification information.
Innovation Solution
Utilizes Internet domain name retrieval and machine learning techniques to authenticate identities by scanning identification documents, sending verification links to associated email addresses, and confirming click-through actions, eliminating the need for traditional authentication methods.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional multifactor authentication methods (SMS texts, phone numbers) are used, then authentication can be performed, but security is compromised due to interception by malicious entities and recycled phone numbers
Solution Approach 1:
The patent introduces an intermediary authentication mechanism using email verification links as a mediator between the authentication system and the user. Instead of directly using SMS texts that can be intercepted, the system sends verification links through email, which serves as a secure intermediary channel that is not susceptible to the same interception vulnerabilities affecting SMS texts.
Solution Approach 2:
The patent replaces the mechanical/SMS-based authentication system with an email-based verification system. This substitution moves the authentication mechanism from a vulnerable SMS infrastructure to a more secure email infrastructure, eliminating the harmful factor of SMS interception while maintaining authentication functionality.
2Reliability
If username and password authentication is used, then authentication can be performed, but security is compromised due to leaked user credentials on the web
Solution Approach 1:
The patent extracts and eliminates the vulnerable username and password authentication mechanism from the system. By removing this problematic authentication method, the system avoids the harmful effect of credential leakage that plagues traditional web-based authentication systems.
Solution Approach 2:
Instead of using vulnerable text-based credentials, the patent employs a different form of authentication identity - email verification links that function as a copy or alternative representation of user identity. This alternative authentication vector does not suffer from the same credential leakage issues as traditional usernames and passwords.
3Adaptability or versatility
If international students and travelers use traditional authentication methods, then authentication can be performed, but it becomes challenging due to lack of verified identification
Solution Approach 1:
The patent implements a universal authentication mechanism that works across different user scenarios, particularly for international students and travelers. The email verification system serves multiple functions: it verifies identity, confirms email ownership, and provides authentication without requiring traditional identification documents, thereby achieving both accessibility and reliability for this specific user demographic.
Data Source
AI summary
An enrollment system uses a camera to scan an identification document to generate an image. A name of an organization is extracted from the image. The enrollment system obtains one or more Internet domain names associated with the organization. Using a graphical user interface, a prompt is displayed seeking input of an e-mail address of a user of the enrollment system. The input of the e-mail address is received via the graphical user interface. The enrollment system determines that the e-mail address is associated with the one or more Internet domain names. An e-mail is sent to the e-mail address of the user. The enrollment system determines that the user has clicked on a hyperlink in the e-mail using a mobile device that is different from the enrollment system. The enrollment system performs functions to enroll the mobile device in a service plan operated by a mobile network operator.