Electronic Transaction Channels with Centralized Multi-Factor Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices face challenges in managing multiple user authentication processes and transactions across various applications, leading to user overwhelm and security concerns due to the lack of a centralized and secure access point.
Innovation Solution
A central application that facilitates interactions with multiple third-party systems, performs multi-factor user authentication, and manages transactions, while maintaining user data privacy by acting as a single point of access and authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If mobile devices facilitate electronic transactions through multiple channels and collect user authentication information across various applications, then transaction versatility and functionality are improved, but device complexity and user burden increase
Solution Approach 1:
The patent segments the authentication process into separate authentication factors (knowledge-based, possession-based, inherence-based) that can be independently selected and combined. This allows the system to maintain versatility across multiple transaction channels while managing complexity by organizing authentication into discrete, manageable segments rather than monolithic processes.
Solution Approach 2:
The patent creates a universal authentication framework that can be applied across multiple different applications and transaction channels through a single centralized interface. The authentication system serves multiple functions (login, authorization, verification) across diverse contexts, reducing the need for separate authentication mechanisms for each channel while maintaining adaptability.
2Adaptability or versatility
If mobile devices manage multiple user authentication processes across various applications, then access to third-party systems is improved, but security risks and user overwhelm increase
Solution Approach 1:
The patent introduces a centralized authentication interface as an intermediary between users and multiple third-party systems. This intermediary consolidates multiple authentication processes into a single point of interaction, improving access efficiency while enhancing security by centralizing authentication management and reducing the attack surface distributed across multiple application-specific authentication mechanisms.
Solution Approach 2:
The patent merges multiple authentication factors and access control mechanisms into a unified authentication framework. By combining knowledge-based, possession-based, and inherence-based factors within a single manageable interface, the system improves reliability through consolidated security management while maintaining versatile access to multiple third-party systems.
3Ease of operation
If centralized authentication interface is implemented, then ease of operation and user experience are improved, but authentication process steps may increase
Solution Approach 1:
The patent implements a dynamic authentication process where the system adapts the number and type of authentication factors required based on the specific transaction context, risk level, and user profile. This dynamic approach allows the interface to simplify when possible (reducing steps for low-risk transactions) while maintaining security when needed, thus improving ease of operation without consistently increasing time loss.
Solution Approach 2:
The patent changes the parameters of authentication (number of factors, type of factors, timing) based on contextual conditions. By adjusting authentication rigor dynamically rather than applying a fixed multi-step process, the system optimizes between ease of operation and time consumption for different scenarios, allowing quick authentication for trusted transactions while implementing more thorough verification only when necessary.
Data Source
AI summary
An example method includes receiving a request for a transaction; associating the request with a user; receiving, from the user, identification information; retrieving, from a database, first stored authentication information associated with the user; retrieving, from a distributed ledger, second stored authentication information associated with the user; and determining that the received authentication information matches the first stored authentication details and the second stored authentication details and, in response, outputting, by the computing system, a proof of authentication to enable the transaction.