Dynamic Multi-Factor Authentication Scenario Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication systems lack a dynamic evaluation mechanism to adaptively combine various authentication elements, leading to inflexible and insecure login processes, especially with the increasing use of high-function mobile terminals.
Innovation Solution
A multi-factor authentication apparatus that stores scenarios of authentication procedures with associated success probabilities, evaluates security and usability based on these probabilities, and controls the authentication process dynamically to ensure continuous and secure service provision.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-factor authentication combining multiple authentication elements is implemented, then security is improved, but device complexity and procedure complexity increase
Solution Approach 1:
The patent implements dynamic scenario selection where the authentication procedure adapts based on calculated success probabilities. The system dynamically chooses between serial and parallel procedure combinations of authentication elements (biometric, knowledge-based, possession-based) depending on the evaluated security risk level, making the complex system adaptable rather than statically complex
Solution Approach 2:
The system changes the parameter of procedure composition from fixed to variable by calculating success probabilities for different authentication elements and selecting optimal combinations. This allows the authentication system to adjust its complexity parameter based on security requirements and user behavior patterns
2Adaptability or versatility
If fixed authentication procedures are used, then device complexity is reduced, but adaptability to changing security environments deteriorates
Solution Approach 1:
The system incorporates feedback mechanisms by continuously monitoring authentication success probabilities and user behavior patterns. This feedback loop enables the system to adapt authentication scenarios dynamically, selecting appropriate procedure combinations based on real-time security assessments and calculated success probabilities
Solution Approach 2:
The authentication system transitions from static fixed procedures to dynamic adaptive procedures that respond to changing security environments. The system dynamically adjusts scenario selection and procedure composition based on evaluated success probabilities and security requirements
3Reliability
If serial authentication procedures are used, then security is improved through sequential verification, but authentication time increases
Solution Approach 1:
The system dynamically selects between serial and parallel procedure combinations based on calculated success probabilities. When security risk is low and success probability is high, parallel procedures reduce authentication time. When security risk increases, the system transitions to serial procedures to maintain security, optimizing the time-security tradeoff dynamically
Solution Approach 2:
The system changes the procedural parameter from fixed serial/parallel to variable composition based on success probability calculations. This allows optimization of authentication time by selecting parallel procedures when appropriate while maintaining security through serial verification when needed
4Reliability
If additional authentication elements are added dynamically based on user behavior, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The system uses feedback from user behavior analysis to dynamically adjust authentication requirements. By monitoring authentication success probabilities and user patterns, the system adds authentication elements only when security risk warrants it, maintaining ease of operation during normal use while enhancing security when needed
Solution Approach 2:
The system changes the parameter of authentication element quantity from fixed to variable based on success probability evaluations. This allows the system to maintain simplicity (fewer elements) during low-risk scenarios while adding elements dynamically when security requirements increase
Data Source
AI summary
A scenario including a combination of procedures of multi-factor authentication required for a terminal to receive provision of a service is stored and managed in association with the service, and a probability that the procedure will succeed is stored and managed in association with each of the procedures, a success probability of the service through the scenario, is calculated based on the probability regarding the procedure to evaluate at least one of security and usability based on the success probability, and the service to the terminal, is controlled according to the evaluation result.