Multi-Factor OTP Authentication Using Isolated Device Partitions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing multi-factor authentication systems using one-time passwords (OTPs) are vulnerable to unauthorized access when the same device is compromised, reducing the effectiveness of the additional authentication factor.
Innovation Solution
Implementing multiple device partitions, either hardware or virtual, on a single computing device, where different OTPs are sent to separate partitions, with distinct authentication credentials and encryption, and using decoy OTPs to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple device partitions are implemented to enhance OTP security, then security reliability is improved, but device complexity increases
Solution Approach 1:
The device is divided into multiple independent partitions (first partition, second partition, third partition) that are isolated from each other. Each partition can store and process OTPs independently, so that compromise of one partition does not affect others. This segmentation achieves the security improvement while containing complexity within manageable boundaries.
Solution Approach 2:
A partition manager is introduced as an intermediary component that coordinates between the multiple partitions and the OTP server. The partition manager handles the complexity of managing multiple partitions, selecting which partition receives OTPs, and coordinating authentication flows, thereby abstracting the complexity from the user and simplifying the overall system interaction.
2Reliability
If OTPs are split across multiple partitions with different authentication credentials, then security against unauthorized access is improved, but ease of operation deteriorates
Solution Approach 1:
The system automatically manages the complexity of distributing OTPs across multiple partitions and validating authentication credentials without requiring user intervention. The partition manager handles the selection, distribution, and validation processes autonomously, presenting a simplified interface to the user while maintaining enhanced security through multiple authentication factors.
Solution Approach 2:
The partition manager serves multiple functions: it manages partition selection, distributes OTPs, validates authentication credentials, and coordinates with the OTP server. This multi-functionality consolidates what would otherwise be multiple separate components, improving ease of operation while maintaining security.
3Difficulty of detecting and measuring
If decoy OTPs are implemented to warn of compromised partitions, then security detection capability is improved, but device complexity increases
Solution Approach 1:
Decoy OTPs are introduced as a security feature that appears to be part of the normal authentication process but actually serves as a warning mechanism. When a user receives a decoy OTP, it indicates that a partition has been compromised, converting a potentially harmful situation into a useful security alert. The decoy OTPs are seamlessly integrated into the existing OTP distribution mechanism, minimizing additional complexity.
Data Source
AI summary
A computing device may configure a plurality of device partitions. The computing device may send, to a one time password (OTP) server and via an interface of a first partition of the plurality of device partitions, a login request. The computing device may receive, at a second partition of the plurality of device partitions, an OTP. The computing device may access, by validating authentication credentials corresponding to the second partition of the plurality of device partitions, the OTP. The computing device may send, to the OTP server, the OTP. The computing device may access, upon receiving confirmation of validation of the OTP, services hosted by the OTP server.