Browser Extension Automates MFA Code Injection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-factor authentication (MFA) processes using Time-based One-Time Password (TOTP) are cumbersome and prone to errors due to the need for users to manually read and type access codes between devices, slowing down the authentication process.
Innovation Solution
A system that pushes MFA notifications to a second computing device and automatically injects the access code into the login form on the first computing system, eliminating the need for manual typing, by using a browser extension to communicate with an MFA app on the second device to confirm access and generate the access code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If users manually read and type access codes between devices, then authentication security is maintained, but the authentication process becomes slow and cumbersome
Solution Approach 1:
The patent introduces an intermediary component (browser extension or automated input mechanism) that mediates between the MFA app on the mobile device and the login form on the computer. This intermediary automatically captures the generated access code and inputs it into the login form, eliminating the need for manual typing while maintaining security. The intermediary acts as a bridge that automates the code transfer process.
Solution Approach 2:
The system enables self-service by allowing the MFA app to automatically perform the code input task without user intervention. The app generates the code and the system automatically feeds it into the login form, making the authentication process self-sufficient. The user only needs to approve the request on their mobile device, and the system handles the rest automatically.
2Reliability
If users manually type access codes, then authentication accuracy can be maintained, but errors occur due to reading and typing mistakes
Solution Approach 1:
The intermediary component eliminates human error in code entry by automatically capturing the exact code generated by the MFA app and inputting it into the login form. This automated transfer mechanism ensures 100% accuracy in code entry, as there is no manual reading or typing involved. The intermediary guarantees that the code is transferred exactly as generated, without any transcription errors.
Solution Approach 2:
The patent replaces the mechanical process of manual reading and typing with an automated electronic system. Instead of the user's eyes reading the code and fingers typing it, the system uses automated software components to capture and input the code electronically. This substitution of mechanical human actions with automated electronic processes eliminates errors and speeds up the process.
3Ease of operation
If automated code injection is implemented, then user experience is enhanced, but system complexity increases due to browser extension integration
Solution Approach 1:
The browser extension is designed to be universal and work with multiple login forms and MFA apps across different websites and platforms. By creating a single multi-functional extension that can handle various authentication scenarios, the system reduces the need for multiple specialized components. The extension serves multiple purposes: detecting login forms, communicating with MFA apps, capturing codes, and automating input, thereby managing complexity through consolidation.
Data Source
AI summary
Multi-factor authentication is started by a software component on a first computing system identifying request information for an access code to allow access to a network resource. The request information is transmitted from the first computing system to a second computing system. Access to the network resource is confirmed at the second computing system in response to the request information. The access code is automatically provided to the software component on the first computing system in response to the confirming access to the network resource at the second computing system. The software component then provides the access code to allow access to the network resource.