Interactive Authentication Token System for Legitimate User Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer systems face challenges in distinguishing between errors made by legitimate users and illegitimate users attempting to guess or forge authentication credentials, leading to potential lockout of legitimate users due to malicious tampering with the lockout mechanism.
Innovation Solution
The implementation of an identification token system that differentiates between legitimate and illegitimate users by verifying tokens within a list of valid tokens, allowing legitimate users to bypass lockout periods and increasing lockout durations for illegitimate users, thereby preventing disruption of normal operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a lockout period is implemented to prevent illegitimate users from guessing authentication credentials, then security against illegitimate users is improved, but legitimate users may be blocked from authentication when the lockout period is permanently locked
Solution Approach 1:
The patent applies local quality by differentiating between legitimate and illegitimate users through identification tokens. Legitimate users receive tokens that allow them to bypass lockout periods, while illegitimate users without valid tokens are subject to lockout. This creates different authentication experiences based on user legitimacy, resolving the contradiction between security and ease of operation.
Solution Approach 2:
The identification token acts as an intermediary mechanism between the authentication system and users. It mediates the conflict by providing legitimate users with a credential that overrides lockout restrictions, while denying access to illegitimate users. The token system allows the system to maintain security measures without permanently blocking legitimate users.
2Reliability
If the lockout period is increased to deter illegitimate users, then security is improved, but the system complexity increases due to token verification requirements
Solution Approach 1:
The system uses identification tokens as copies or representations of user legitimacy. Instead of implementing complex behavioral analysis or multiple verification layers, the system creates simplified token copies that encode user legitimacy status. This allows the system to maintain security through token verification while avoiding excessive system complexity.
3Object-affected harmful factors
If permanent lockout is implemented to prevent illegitimate users from blocking legitimate users, then protection against malicious tampering is improved, but the ability to reset lockout for legitimate users is lost
Solution Approach 1:
The patent changes the parameter of lockout behavior based on user legitimacy. Instead of a fixed permanent lockout, the system dynamically adjusts lockout application based on the identification token status. Legitimate users with valid tokens experience no lockout restriction, while illegitimate users are subject to lockout. This parameter change allows the system to maintain protection against malicious tampering while preserving lockout reset capability for legitimate users.
Data Source
AI summary
The present disclosure describes methods, systems, and computer program products for interactive authentication can include receiving a valid authentication credential or an invalid authentication credential associated with a digital identity. The credentials can be received from an end user at an input device in association with a login attempt. If a valid authentication credential is received, it is determined whether an identification token is received with the valid authentication credential. If received, the identification token is identified as a token included in a list of valid tokens associated with the digital identity at an authentication system. In response to the determination that the identification token is included in the list of valid tokens, it is determined whether a lockout period associated with the identification token in the list of valid tokens has expired. If expired, the end user associated with the login attempt can be authenticated.