Identification Card MFA Using Predicted Document Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing multi-factor authentication (MFA) techniques are vulnerable to fraudsters who spoof users during MFA steps to gain unauthorized access to user information, as one-time passwords and other traditional methods are no longer sufficient to provide adequate security.
Innovation Solution
Enhanced MFA process that requires users to capture and verify images of merchant-issued membership cards or loyalty cards, leveraging historical user interactions to predict which cards they are likely to possess, using artificial intelligence and computer vision to authenticate the user.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional MFA methods like one-time passwords are used, then authentication can be performed, but security is insufficient against sophisticated fraudsters
Solution Approach 1:
The system performs preliminary actions by analyzing user interaction history and predicting which identification documents the user is likely to possess before authentication occurs. This pre-computation of predicted documents allows the system to set up the authentication challenge in advance, requiring the user to have the specific predicted document ready, thereby enhancing security without making the actual authentication process complex
Solution Approach 2:
The system introduces an intermediary element - the predicted identification document - that serves as a mediator between the user and the authentication system. Instead of directly authenticating the user, the system requires verification of possession of a specific predicted document, which acts as an intermediary proof of identity that is difficult for fraudsters to obtain
2Reliability
If MFA requires users to have specific identification documents, then security is improved, but the system must accurately predict which documents users possess
Solution Approach 1:
The system implements feedback by continuously analyzing user interaction data and adjusting its predictions of which identification documents the user possesses. By monitoring patterns in user behavior, device usage, and interaction history, the system refines its prediction accuracy over time, ensuring that the predicted documents are indeed the ones the user is likely to have at any given moment
Solution Approach 2:
The system changes parameters by dynamically adjusting its prediction model based on multiple varying factors including user interaction frequency, device type, location data, and temporal patterns. By modifying these parameters and their weights, the system optimizes prediction accuracy to match the specific user's behavior patterns and document possession likelihood
3Reliability
If the system analyzes user interaction history to predict documents, then authentication security is enhanced, but data processing requirements increase
Solution Approach 1:
The system performs preliminary data processing by analyzing user interaction history and generating predictions of possessed documents in advance, before authentication is required. This pre-computation approach processes data during periods of lower demand and stores the predictions, reducing the energy required during actual authentication events while maintaining high security through the use of predicted document verification
Data Source
AI summary
Systems and methods for improvements to multifactor authentication (MFA) techniques are described herein. The improved and enhanced MFA techniques can leverage user interaction data to predict an entity-issued user-specific identification document that an authorized user of an authorized user account is most likely to carry on their person. Upon a request to access an authorized user account being received, the improved and enhanced MFA techniques can request that the user capture, in real-time, an image depicting the predicted identification document. Using additional artificial intelligence, a determination may be made as to whether the image depicts a real instance of the entity-issued user-specific identification document. This determination may result in access to the authorized user account being provided or denied.