Dynamic Authentication Steps with Temporary Identity Tokens

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing augmented reality systems face security risks due to breaches in augmented reality and internet interactions, which increase potential vulnerabilities during product purchases and transactions.

Innovation Solution

A computer-based system dynamically generates a temporary identity token and a unique-universal identifier using multi-factor authentication, linking it with encrypted data items through a security module to authenticate activities in real-time, utilizing machine learning algorithms for enhanced security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multi-factor authentication and temporary identity tokens are implemented, then security reliability is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity reliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication process is divided into multiple segments: temporary identity token generation, token transmission to external computing device, authentication verification, and data retrieval. Each segment handles a specific security function, allowing the system to achieve high security reliability through modular authentication steps without requiring a single complex monolithic system.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

An external computing device serves as an intermediary between the augmented reality device and the data storage system. The external device receives temporary identity tokens, verifies authentication, and returns authenticated digital tokens. This intermediary approach distributes security functions across multiple systems, improving overall security while allowing each component to remain relatively simple.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If real-time authentication and data exchange are implemented, then transaction security is improved, but processing time increases

Engineering Contradiction:
Improvetransaction securityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary authentication actions by generating temporary identity tokens before actual data transactions occur. These tokens are validated in advance against stored credentials, and authenticated digital tokens are obtained beforehand. This preliminary authentication setup enables subsequent data exchanges to proceed more quickly while maintaining high security standards.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

Once authentication is completed and an authenticated digital token is obtained, the system maintains continuous security validation throughout the data exchange process. The security module continuously verifies token validity and associates authenticated data items with the authenticated token, ensuring uninterrupted security monitoring during transactions without requiring repeated authentication cycles.

Inventive Principle:
Principle #20Continuity of useful action

3Reliability

If encrypted data storage and security modules are used, then data protection is improved, but system complexity increases

Engineering Contradiction:
Improvedata protectionVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system creates a copy of the authentication token (authenticated digital token) that is associated with encrypted data items in the database. Instead of storing decrypted sensitive data, the system stores encrypted data and uses the authenticated token as a reference key. This copying approach allows secure data retrieval without requiring complex decryption mechanisms during normal operations.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The system changes the state of data from encrypted form during storage to decrypted form during authorized access, controlled by the authenticated digital token. The security module manages parameter transformations between these states, allowing the system to maintain data protection during storage while enabling efficient retrieval when authentication is verified, thus balancing security with operational simplicity.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20250337582A1Computer-based systems configured to dynamically generate authentication steps to perform at least one action and methods of use thereof
Publication Date: 2025.10.30 CAPITAL ONE SERVICES LLC
  • US20250337582A1 patent drawing
  • US20250337582A1 patent drawing
  • US20250337582A1 patent drawing

AI summary

In some embodiments, the present disclosure provides an exemplary method that may include steps of determining an identity of at least one user of a plurality of users based on a multi-factor authentication; utilizing an identity tokenizer to generate at least one temporary identity token associated with the identity of the user; transmitting the at least one temporary identity token to an external computing device for authentication; receiving an authenticated digital token from the external computing device; automatically utilizing the authenticated digital token to retrieve a plurality of data items of an account information; utilizing a security module to link the authenticated digital token and the plurality of data items; generating a unique-universal identifier associated with the security module and the authenticated digital token; and utilizing the unique-universal identifier and the security module associated with the authenticated digital token.