Dynamic Lock Screen Authentication Mode Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face increased 'friction' due to multiple serial authentications required for electronic devices, as they need to enter various credentials for different security levels, even when accessing non-sensitive functions, which complicates the user experience.
Innovation Solution
An electronic device with a processor and display screen that determines the authentication state and displays a lock screen with appropriate authentication modes, allowing users to select or pre-select low-security or high-security authentication based on the context, such as a mixed-security lock screen with options for PIN or password entry, reducing the need for multiple credential entries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple serial authentications are required for different security levels, then security is improved, but user friction increases and workflow becomes longer and more complicated
Solution Approach 1:
The lock screen dynamically adapts its authentication requirements based on the user's current authentication state and the security level of the requested function. The system transitions between different authentication modes (low-security PIN only, high-security password required, or expired credentials) rather than always requiring the same authentication sequence, thereby reducing friction for low-security operations while maintaining security for sensitive functions
Solution Approach 2:
The authentication system is segmented into different security levels (low-security PIN and high-security password) that can be independently applied based on the specific function being accessed. The lock screen is divided into different authentication modes that can be selectively activated, allowing users to bypass high-security authentication when accessing non-sensitive functions while still requiring it for sensitive operations
2Reliability
If high-security credentials are required for sensitive applications, then security is improved, but the authentication process becomes more complex and time-consuming
Solution Approach 1:
The system performs preliminary authentication actions by maintaining an authentication state that persists across different operations. When a user successfully authenticates with high-security credentials, this authentication state is cached and reused for subsequent low-security operations, eliminating the need to re-enter credentials and reducing authentication time for routine tasks
Solution Approach 2:
The lock screen automatically determines the appropriate authentication mode required based on the current authentication state and the security requirements of the requested function. The system self-manages the authentication flow by selecting whether to prompt for PIN only, password only, or both credentials, reducing the need for user intervention and minimizing authentication time
3Ease of operation
If a single sign-on authentication mechanism is used, then user friction is reduced, but it cannot adequately address the different security levels required for various functions
Solution Approach 1:
Different security levels are applied locally to different functions and operations rather than using a uniform authentication mechanism. The lock screen evaluates the security requirements of the specific function being accessed and applies the appropriate authentication level (low-security PIN for non-sensitive functions, high-security password for sensitive functions), allowing single-sign-on-like convenience for low-security operations while maintaining strong security differentiation for sensitive operations
4Reliability
If multiple credentials are required in serial succession, then security is improved, but the workflow becomes longer and more complicated
Solution Approach 1:
The authentication process dynamically adapts its complexity based on the user's authentication state and the security requirements of the requested operation. The system transitions between simplified modes (PIN only for low-security functions when authenticated) and complex modes (password required or expired credentials), reducing the apparent complexity of the authentication process for routine operations while maintaining security for sensitive functions
Data Source
AI summary
A method of enabling a lock screen of an electronic device operating an electronic device that includes an electronic processor and a display screen. The method includes receiving, by the electronic processor, a request to unlock the electronic device. The method further includes determining, by the electronic processor, an authentication state for the electronic device. The method further includes, determining, by the electronic processor, a lock screen authentication mode based on the authentication state, and displaying, on the display screen, a lock screen including the lock screen authentication mode. The electronic device includes a display screen and an electronic processor. The electronic processor is configured to receive a request to unlock the electronic device. The electronic processor is further configured to determine an authentication state for the electronic device, determine a lock screen authentication mode based on the authentication state and display on the display screen, a lock screen including the lock screen authentication mode.