Intelligence Manager for Automated Security Challenge Response

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current online transaction security systems are vulnerable to fraud and unauthorized access, leading to user dissatisfaction and organizational concerns due to compromised devices and inadequate authentication methods.

Innovation Solution

A system incorporating an intelligence manager on client devices that verifies user and device identity, detects suspect transactions, and employs security challenges to prevent unauthorized access, including biometric authentication and automated learning to mitigate threats.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional logon passwords or credentials are used for authentication, then the ease of operation is improved, but the reliability is worsened due to fraud vulnerability

Engineering Contradiction:
Improveauthentication convenienceVSAvoidsecurity against fraud
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication system is segmented into multiple independent components: device identification, user credential verification, security challenge-response mechanisms, and transaction monitoring. Each component operates independently to provide layered security, preventing single-point failure and reducing fraud vulnerability while maintaining user convenience.

Inventive Principle:
Principle #1Segmentation

2Reliability

If security challenges are implemented to verify suspicious transactions, then the reliability is improved, but the ease of operation is worsened due to additional verification steps

Engineering Contradiction:
Improvefraud detection capabilityVSAvoidtransaction processing speed
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary device identification and baseline security verification before transactions occur. Security challenges are pre-configured and automatically triggered only when suspicious patterns are detected, rather than requiring verification for every transaction. This preliminary setup enables fast legitimate transactions while maintaining robust fraud detection.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The security verification process is dynamic rather than static. The system adapts the level of security challenge based on transaction risk assessment, user behavior patterns, and device trust levels. Low-risk transactions proceed quickly with minimal verification, while high-risk transactions trigger enhanced security challenges, optimizing both reliability and ease of operation.

Inventive Principle:
Principle #15Dynamics

3Reliability

If automated learning systems are deployed to detect compromised devices, then the reliability is improved, but the device complexity is worsened

Engineering Contradiction:
Improvethreat detection accuracyVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

An intermediary automated learning system acts as a mediator between device operations and security decision-making. This intermediary analyzes transaction patterns, device behavior, and security events to detect compromised devices, isolating the complexity of machine learning algorithms from the core authentication system while maintaining high detection accuracy.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The automated learning system operates autonomously to detect and respond to compromised devices without requiring manual configuration or intervention. It self-trains on security data, automatically adjusts detection thresholds, and dynamically updates security rules, reducing the operational complexity burden on system administrators while maintaining high reliability.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11758403B1Threat identification, prevention, and remedy
Publication Date: 2023.09.12 WELLS FARGO BANK NA
  • US11758403B1 patent drawing
  • US11758403B1 patent drawing
  • US11758403B1 patent drawing

AI summary

Theft identification, prevention, and remedy are provided. A determination is made that a client device has been compromised. When the device makes the determination, a message is conveyed to the server and the server replies with a security challenge. When the server makes the determination, the security challenge is automatically sent to the device. An intelligence manager on the device attempts to answer the security question without interaction from the user. If there is an anomaly, a challenge is output to the user. Based on a false response to the challenge, a current data stream may be disrupted and removed from the device. Further, other devices in the network may be notified about the compromised device.