Link Strength in Knowledge-Based Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional knowledge-based authentication (KBA) systems face challenges in forming questions that are neither too difficult for legitimate users nor too easy for fraudulent users, as they fail to consider connections between users and do not differentiate between individual and group authentication, leading to high false positives and false negatives.
Innovation Solution
A KBA system that collects facts with references to users within a group, favoring those with few external references to generate targeted questions, controlling difficulty by examining internal and external user connections, and refining questions through a feedback mechanism to reduce false positives and negatives.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional KBA service providers form questions based on facts connected to a user identifier, then the questions are specific to the user, but the questions become too difficult for legitimate users to answer while too easy for fraudulent users
Solution Approach 1:
The patent applies local quality by differentiating between internal connections (within the target user group) and external connections (outside the group). The system selectively weights facts based on their connection patterns - favoring facts with strong internal connections and few external connections. This creates locally optimized question difficulty for each authentication context, making questions appropriately challenging for legitimate group members while remaining difficult for external fraudulent users.
Solution Approach 2:
The system dynamically changes the parameter of question difficulty by adjusting which facts are selected based on connection analysis. Instead of using fixed difficulty levels, the system modifies the composition of questions by selecting facts with specific connection patterns (high internal link strength, low external link strength). This parameter adjustment allows the system to optimize authentication reliability while maintaining appropriate difficulty levels.
2Reliability
If the KBA system considers connections between users to control question difficulty, then question difficulty can be optimized, but the system complexity increases due to analyzing user connections
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing connection information (link strengths) between users and facts in a database structure before authentication occurs. The system maintains a factual database with pre-analyzed connection patterns, allowing the authentication system to quickly retrieve and evaluate facts based on pre-computed link strengths without performing complex graph analysis in real-time. This preliminary preparation reduces runtime complexity while maintaining high authentication accuracy.
Solution Approach 2:
The system introduces an intermediary layer - the pre-computed link strength database - that mediates between the raw factual data and the authentication decision process. Instead of directly analyzing complex user connection graphs during authentication, the system uses this intermediary structure that has already processed and organized connection information. This intermediary simplifies the authentication logic while preserving the benefits of connection-based difficulty control.
3Adaptability or versatility
If conventional KBA systems do not differentiate between individual and group authentication, then the system is simpler to implement, but the system cannot authenticate users as members of a group
Solution Approach 1:
The patent applies universality by designing a fact-based authentication system that can serve multiple functions - both individual user authentication and group membership authentication - through the same core mechanism. The system uses a universal factual database and link strength calculation that works for both individual users (where the user is compared against general facts) and group members (where the user is compared against facts connected to group members). This multi-functional design achieves adaptability without proportionally increasing complexity.
Solution Approach 2:
The system applies dynamics by making the authentication target flexible - it can dynamically switch between authenticating an individual user versus authenticating a group member based on the authentication request. The link strength calculation and fact selection process adapts dynamically to whether the context is individual or group authentication, allowing the same system structure to handle both cases appropriately without requiring separate dedicated systems.
Data Source
AI summary
An improved technique generates questions to authenticate a user as part of a group. Along these lines, a KBA system, upon receiving a request to authenticate a particular user, collects facts having references to users of the group of users. The collected facts, however, may also include references to users not in the group of users. In building a set of questions for the particular user, the KBA system is capable of favoring facts having references to users of the group of users and few, if any, references to users not in the group of users; conversely, the KBA system is capable of discarding facts having too many references to users not in the group of users. The particular user's responses to the set of questions are indicative of whether the particular user belongs to the group.