Dynamic Multifactor Authentication Using Weighted User Attributes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods in financial institutions are prone to fraud due to vulnerabilities in various channels of access, leading to user dissatisfaction and increased costs for fraud prevention, as they often rely on static passwords and one-time authentication processes that do not adapt to real-time user interactions.
Innovation Solution
A system that employs relative and dynamic multifactor authentication, continuously monitoring and evaluating user attributes such as behavioral, health, and geospatial data using weighted values to authenticate users in real-time, allowing seamless interactions while suspending or requesting additional authentication if thresholds are exceeded, and incorporating device pairing and external sensors for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If static password authentication is used, then implementation simplicity is maintained, but security against fraud deteriorates
Solution Approach 1:
The patent implements dynamic authentication that continuously adapts to user behavior patterns, device characteristics, and contextual factors. The system transitions from static password verification to real-time evaluation of multiple changing attributes, making the authentication process responsive to current conditions while maintaining manageable complexity through automated analysis.
Solution Approach 2:
The system changes authentication parameters by evaluating multiple attributes including behavioral patterns, device metadata, geospatial information, and transaction context. These parameter changes enable the system to assess risk dynamically and adjust authentication requirements based on the cumulative evaluation of multiple factors rather than relying on a single static credential.
2Reliability
If continuous multifactor authentication is implemented, then security is improved, but user interaction complexity increases
Solution Approach 1:
The authentication system operates autonomously by automatically collecting, analyzing, and evaluating multiple user attributes without requiring active user participation. The system self-manages the authentication process by comparing observed behaviors against established patterns and making authorization decisions based on cumulative attribute evaluation, eliminating the need for users to manually provide multiple authentication factors.
Solution Approach 2:
The system performs multiple authentication functions simultaneously by evaluating diverse attributes including behavioral patterns, device characteristics, geospatial data, and transaction context. This multi-functional approach consolidates what would otherwise require separate authentication steps into a unified continuous process that enhances security while maintaining user experience.
3Ease of operation
If traditional authentication channels are used, then access convenience is maintained, but vulnerability to fraud increases
Solution Approach 1:
The system implements continuous feedback loops that monitor user interactions across all authentication channels and adjust authentication requirements in real-time. By continuously evaluating user attributes and comparing them against established patterns, the system provides immediate feedback on authentication confidence levels and dynamically adjusts security measures based on observed deviations from normal behavior, thereby protecting convenient access channels from fraud.
Data Source
AI summary
Provided is relative multifactor authentication for interactions between users and one or more entities. Relative multifactor authentication includes monitoring a set of attributes associated with a user during an interaction between the user and the entity. The set of attributes include at least two of a behavioral attribute, a health attribute, a geospatial attribute, and a device attribute. Relative multifactor authentication also include comparing respective parameters of attributes of the set of attributes with expected parameters and determining an authentication status based on the comparison and weighted values assigned to respective attributes of the set of attributes. The user is selectively authenticated to begin to continue the interaction based on the authentication status.