Invisible Authentication for Low-Risk Electronic Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile electronic resource management systems require cumbersome multi-factor authentication for low-risk access requests, such as checking account balances or transaction statuses, which is time-consuming and inefficient.
Innovation Solution
A server computing device performs invisible authentication by encrypting and decrypting identification data using a cryptographic key, and utilizing machine learning to compare context information with prestored data, allowing low-risk access requests to be processed automatically without user intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-factor authentication is implemented for security, then security is improved, but authentication time and complexity increase
Solution Approach 1:
The system performs preliminary authentication by embedding encrypted identification data in the URL itself, allowing the authentication process to begin before the user even initiates the access request. The encrypted account number is pre-positioned in the URL parameters, enabling rapid verification without requiring separate authentication steps.
Solution Approach 2:
The patent extracts the essential authentication element (encrypted identification data) from the complex multi-factor authentication process and places it directly in the URL. This extraction allows the core authentication function to be performed independently and rapidly, separating it from the cumbersome MFA process while maintaining security.
2Reliability
If multi-factor authentication is implemented for security, then security is improved, but operational complexity increases
Solution Approach 1:
The system enables self-service authentication where the user's own URL containing encrypted identification data serves as the authentication credential. The user simply needs to access their personalized URL, and the system automatically verifies their identity through the embedded encrypted data, eliminating the need for manual MFA steps.
Solution Approach 2:
The encrypted identification data in the URL acts as an intermediary that bridges the user and the authentication system. Instead of directly implementing complex MFA, the system uses this encrypted intermediary to convey authentication information, simplifying the user interface while maintaining security through the cryptographic layer.
3Reliability
If encrypted identification data is transmitted in URL, then security is improved, but data processing complexity increases
Solution Approach 1:
The patent replaces manual authentication mechanics with automated cryptographic verification. Instead of mechanical MFA processes requiring user interaction with multiple factors, the system uses automated decryption and verification of the encrypted identification data in the URL, substituting complex manual processes with streamlined computational operations.
Data Source
AI summary
The present disclosure describes a server computing device configured for receiving from a remote computing device via an application, in response to a low-risk access request to a data resource, a programming call with a URL comprising an second identification data item encrypted from a first identification data item acquired by the remote computing device, obtaining a first context information item associated with the programming call, inputting the first context information item into a machine learning model to generate a second context information item, extracting the second identification data item from the URL, generating a third identification data item by decrypting the second identification data item, retrieving a prestored property data item associated with the third identification data item, and transmitting requested data to the remote computing device if comparing the second context information with the prestored property data item produces a match.