Dynamic Authentication Process Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods, such as passwords and biometrics, can be circumvented and may not always be available, necessitating a secure and user-friendly identification process that adapts to task significance.
Innovation Solution
A method that dynamically selects authentication processes based on confidence scores, adjusting thresholds and process complexity according to task significance, using a combination of biometric and behavioral data to ensure secure user identification and authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple authentication processes are required to enhance security, then security level is improved, but user burden and procedure complexity increase
Solution Approach 1:
The system dynamically adapts the authentication process by selecting different authentication methods and adjusting confidence thresholds based on task significance. For low-significance tasks, simpler authentication with lower thresholds is used, while high-significance tasks trigger more rigorous multi-process authentication with higher thresholds, optimizing both security and user experience.
Solution Approach 2:
The system changes the parameters of authentication by adjusting confidence thresholds and selecting different authentication processes based on the significance of the task. This allows the same authentication system to operate at different security levels without requiring completely different systems for each scenario.
2Ease of operation
If simple authentication methods are used, then user burden is reduced, but security reliability deteriorates
Solution Approach 1:
The system dynamically escalates authentication requirements based on task significance. What appears as a simple authentication process initially can automatically escalate to involve multiple authentication processes if the task is deemed high-significance, ensuring security is maintained without unnecessarily complicating low-risk operations.
Solution Approach 2:
The system applies partial authentication measures for low-significance tasks where full multi-process authentication would be excessive, while reserving complete authentication processes for high-significance tasks. This partial action approach optimizes the balance between security and user convenience.
3Device complexity
If fixed authentication thresholds are applied, then system complexity is reduced, but adaptability to different task significances deteriorates
Solution Approach 1:
The system changes authentication thresholds and process selections based on task significance parameters. This allows a single system to adapt to different security requirements without maintaining separate fixed-threshold systems for each task type.
Solution Approach 2:
The authentication system serves multiple functions by handling both simple and complex authentication scenarios within a single unified framework, adapting its behavior based on task significance rather than requiring separate systems for different authentication levels.
Data Source
AI summary
A method for identifying and/or authenticating a user on a device, the method comprising: requesting identification or authentication of the user for a first task; determining a first threshold in dependence on the first task; selecting a first authentication process from a plurality of authentication processes; determining a confidence score in dependence on a performance of the selected first authentication process, wherein the confidence score indicates a level of confidence in the user's identity; determining whether the confidence score is above or below the first threshold; and if the confidence score is below the first threshold, selecting a second authentication process from the plurality of authentication processes, otherwise identifying or authenticating the user for the first task.