Location-Based User Disambiguation via Identifier Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack robust methods to definitively validate user identity during login attempts, particularly in scenarios where location-based identifiers are used, leading to potential unauthorized access.
Innovation Solution
A computer system generates a first identifier based on a user's location at account creation and matches it with a second identifier and login location during subsequent login attempts, authenticating the user only if they match, and prompts for additional information if they do not, thereby enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If location-based identifiers are used for user authentication, then system security is improved, but the complexity of the authentication process increases
Solution Approach 1:
The authentication process is segmented into distinct phases: account creation phase where a first identifier is generated based on location, and login phase where a second identifier is provided. The system compares these identifiers against stored location data, dividing the complex authentication task into manageable steps that improve both security and understandability.
Solution Approach 2:
During account creation, the system performs preliminary action by determining the user's location and generating a first identifier based on that location. This pre-computed identifier is stored with the account credentials, enabling faster and more secure authentication later without requiring complex real-time location verification during login.
2Reliability
If multiple identifiers and location verification are required for login, then unauthorized access is prevented, but user convenience is reduced
Solution Approach 1:
The system performs self-service authentication by automatically determining the user's current location during the login attempt and automatically comparing it with the stored first identifier. This eliminates the need for manual location verification steps, maintaining security while simplifying the user experience.
Solution Approach 2:
The system changes the authentication parameter from simple credential verification to a composite verification that includes both the provided second identifier and the determined login location. This parameter change enables the system to distinguish between legitimate users and unauthorized access attempts while maintaining a streamlined user interface.
Data Source
AI summary
Embodiments are directed to validating the identity of a user. In one scenario, a computer system determines that a login account has been created for a user, where the creation includes generation of a first identifier for the user based on a user's determined location at the time of account creation. The computer system next receives a login attempt from the user that includes a second, different identifier and one or more login credentials. The computer system then determines the location from which the login attempt was received and, using the second identifier and the determined login location, identifies the user account corresponding to the user. The computer system further authenticates the user upon determining that the second identifier and login location match the first identifier.