Dynamic Authentication Factor Rotation for Security and User Convenience
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems are inefficient and cumbersome, failing to provide adequate security against sophisticated threats while burdening users with multiple keyed inputs, and there is a need for improved methods to protect electronic data from unauthorized access.
Innovation Solution
An authentication system that dynamically rotates authentication factors based on a schedule, random selection, user location, activity, and the presence of auxiliary devices, using biometric and image data, and decentralized identifiers stored on a blockchain for enhanced security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication systems use static credentials (username and password), then the system is simple to operate, but the security is inadequate against sophisticated threats
Solution Approach 1:
The patent implements dynamic authentication factors that automatically rotate and change over time. Instead of static credentials, the system uses biometric data, device identifiers, and other factors that dynamically update, making the authentication system adaptive and resistant to static credential theft while maintaining automated operation that reduces user burden
Solution Approach 2:
The system performs automated authentication factor rotation and selection without requiring user intervention. The authentication system autonomously manages credential rotation schedules, selects appropriate factors, and executes authentication processes, eliminating the need for users to manually manage multiple credentials while enhancing security
2Reliability
If multiple authentication factors are required simultaneously, then the security is enhanced, but the operation becomes cumbersome for users
Solution Approach 1:
The system implements progressive authentication where factors are requested incrementally based on risk assessment and rotation schedules. Instead of requiring all factors simultaneously, the system requests only the necessary number of factors at each authentication event, reducing user burden while maintaining security through layered verification
Solution Approach 2:
Authentication factors are rotated periodically according to predefined schedules, ensuring that not all factors are required at every authentication event. This periodic rotation allows the system to enhance security at certain intervals while providing more convenient authentication at other times, balancing security and usability
3Reliability
If authentication factors are rotated frequently, then the security is improved, but the system complexity increases
Solution Approach 1:
The system incorporates feedback mechanisms that monitor authentication patterns, risk levels, and factor availability to dynamically adjust rotation schedules. This feedback loop allows the system to optimize security by rotating factors based on actual threat conditions rather than fixed schedules, managing complexity through adaptive response to system state
Data Source
AI summary
An authentication system includes one or more processors and a memory storing instructions executable by the one or more processors to cause the one or more processors to receive a first request for an electronic data action from a user device associated with a user and to select one or more first authentication factors from a plurality of available authentication factors based on a rotation schedule, a random selection, a prior location of the user, a prior activity of the user, a presence of an auxiliary device in a vicinity of the user device, or any combination thereof.