Multifactor Authentication Code Generation and Display
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multifactor authentication methods are cumbersome and time-consuming, while existing solutions lack a high level of security, as they can be compromised by guessing passwords or stealing computer-generated tokens.
Innovation Solution
A device and method that utilize a processor to generate and display machine-generated indicia codes representing user-defined password and time-based one-time password factors, allowing for intuitive and efficient authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional multifactor authentication is implemented with multiple input steps (password typing, biometric scan, security code entry), then security level is improved, but user convenience and authentication time deteriorate
Solution Approach 1:
The patent combines multiple authentication factors (password, TOTP, biometric) into a single unified authentication flow. Instead of requiring separate input steps for each factor, the system processes them together through automated image recognition and code validation, maintaining security while improving user convenience.
Solution Approach 2:
The system performs automated validation of authentication factors without requiring manual user input for each factor. The mobile device automatically captures images, extracts codes, and validates them against the authentication service, eliminating the need for users to manually type passwords or security codes.
2Reliability
If traditional multifactor authentication requires multiple separate input steps (typing password, entering security code), then security level is improved, but authentication time increases
Solution Approach 1:
The system performs preliminary actions by pre-configuring multiple authentication factors on the mobile device before the authentication event. The device stores password hashes, TOTP secrets, and biometric data in advance, so that during authentication, these factors can be rapidly processed without requiring time-consuming manual input for each factor.
Solution Approach 2:
The authentication process maintains continuity by seamlessly transitioning between different authentication factors without requiring the user to stop and manually intervene between steps. The system continuously processes image capture, code extraction, and validation in an automated flow, eliminating idle time between authentication steps.
3Reliability
If machine-generated tokens are used for authentication, then security is improved, but vulnerability to theft or mimicry through malware increases
Solution Approach 1:
The patent creates a composite authentication system that combines multiple authentication factors (password hash, TOTP, biometric) rather than relying on a single machine-generated token. This layered approach ensures that even if one factor is compromised through malware or theft, the other factors provide additional security layers that prevent unauthorized access.
Solution Approach 2:
The system introduces an intermediary validation layer that verifies the authenticity of machine-generated tokens through multiple independent factors. Instead of directly trusting a single token, the system uses biometric verification and password hashing as intermediaries to validate the user's identity before accepting the machine-generated authentication data.
Data Source
AI summary
A computer implemented method, device and computer program device are provided including a processor; a storage medium to store a user defined password (UDP) factor and program instructions accessible by the processor; wherein, responsive to execution of the program instructions, the processor to: generate a first machine generated indicia (MGI) code indicative of the UDP factor; and generate a second MGI code indicative of a time-based one-time password (TOTP) factor; and a display to display the first and second MGI codes during an authentication operation.