ML Authentication Platform for Credential-Free Multi-Account Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication methods, such as credentials and token-based authentication, are burdensome and pose security risks, especially for users accessing multiple accounts across different institutions, and smaller organizations lack the resources to implement secure data access solutions.
Innovation Solution
A centralized authentication platform that uses a limited set of user identification information, combined with machine learning models and external data sources, to authenticate users across multiple secure networks, determining risk levels and facilitating secure access to protected data without requiring credentials or tokens.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional credential-based authentication is used, then security verification is achieved, but user burden and operational complexity increase significantly
Solution Approach 1:
The patent extracts the authentication verification function from the traditional credential-based system and relocates it to a decentralized authentication platform. Users only need to provide minimal identification information (name and phone number) to the platform, which then handles the complex verification process across multiple institutions. This removes the burden of managing multiple credentials from users while maintaining security verification through the platform's automated processes.
Solution Approach 2:
The decentralized authentication platform acts as an intermediary between users and multiple institutions. Instead of users directly interacting with each institution's authentication system (requiring multiple credentials), the platform mediates the authentication process by verifying user identity through minimal information and then facilitating access to selected accounts across different institutions, thereby reducing user burden while maintaining security.
2Reliability
If token-based authentication is implemented, then access control is improved, but security risks increase for users accessing multiple accounts
Solution Approach 1:
The patent segments the authentication process into two distinct phases: (1) User identity verification by the decentralized platform using minimal identification information, and (2) Account-specific access control by individual institutions. This segmentation allows the platform to maintain security through verified identity without requiring users to manage multiple tokens, while institutions retain their own access control mechanisms, thereby reducing security risks associated with token management across multiple accounts.
Solution Approach 2:
The system enables institutions to self-manage their own access control policies and security requirements without requiring users to obtain and manage separate tokens for each institution. The decentralized platform handles the identity verification once, and institutions independently apply their own access control rules to authenticated users, reducing the security risks of token-based systems while maintaining access control.
3Reliability
If multiple authentication credentials are required for multiple institutions, then access security is maintained, but device complexity and user burden increase
Solution Approach 1:
The decentralized authentication platform provides a universal authentication mechanism that works across multiple institutions with different security requirements. By verifying user identity once through minimal information (name and phone number) and then enabling access to selected accounts across various institutions, the platform eliminates the need for users to manage multiple institution-specific credentials, thereby reducing system complexity while maintaining access security through the platform's coordinated verification process.
4Reliability
If traditional authentication systems are used, then institutional control is maintained, but smaller organizations cannot implement secure solutions due to resource constraints
Solution Approach 1:
The decentralized authentication platform serves as an intermediary that enables smaller organizations to access secure authentication capabilities without needing to implement their own complex authentication systems. Organizations can integrate with the platform through APIs, allowing them to provide secure account access to users while relying on the platform's infrastructure for identity verification and security management, thereby making secure solutions feasible for resource-constrained organizations.
Solution Approach 2:
The platform provides a universal authentication service that can be adopted by organizations of any size. By offering a standardized, API-based solution that handles complex verification processes centrally, the system enables smaller organizations to implement secure multi-account access without investing in expensive authentication infrastructure, making secure solutions universally accessible regardless of organizational resources.
Data Source
AI summary
Systems, methods, and non-transitory computer readable media are configured to perform operations comprising receiving, by a computing system, selected types of identification information from a user; based at least in part on a machine learning model, determining, by the computing system, a risk level for the user; and determining, by the computing system, whether to authenticate the user with an authentication platform based on the risk level.