Mobile App Authentication Protocol for Secured Area Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile computing devices face security risks due to multitasking capabilities, where applications with sensitive data can remain open in the background, exposing user data to unauthorized access, and existing security protocols are inconvenient, requiring full login upon re-access.
Innovation Solution
Implementing a middle-tier authentication protocol that triggers based on user action and time, allowing re-access to secured areas with reduced authentication requirements, such as a PIN, while maintaining data security and convenience, and using geolocation to provide customized information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If full login authentication is required upon re-accessing the application, then security is improved, but user convenience deteriorates
Solution Approach 1:
The authentication process is segmented into different levels: full login authentication for initial access and simplified authentication (such as PIN or biometric) for re-accessing the application. This segmentation allows the system to maintain high security standards while providing convenience for frequent users who need to re-access the application multiple times.
Solution Approach 2:
The authentication requirement dynamically adjusts based on the user's access pattern and time since last authentication. The system implements a timeout mechanism where the authentication level changes from full login to simplified authentication after a certain period of inactivity, balancing security and convenience based on real-time conditions.
2Productivity
If applications remain open in the background for multitasking, then productivity is improved, but security deteriorates due to potential unauthorized access
Solution Approach 1:
The system performs preliminary authentication actions when the application is launched or re-accessed from the background. By requiring authentication before allowing access to sensitive data or functions, the system ensures that even if the application remains open in the background, unauthorized users cannot access protected resources without proper credentials.
Solution Approach 2:
An intermediary authentication layer is introduced between the background application and the sensitive data it may access. This intermediary mechanism verifies user identity and permissions before allowing the application to interact with protected resources, ensuring that multitasking does not compromise security.
Data Source
AI summary
Embodiments of the present invention provide methods, systems, and computer-readable storage medium for managing access to an application on a mobile computing device. In an embodiment, a method includes receiving a request from a user to return to the application and return to a previous screen of the application on the mobile computing device, and determining, using a processor, whether the previous screen of the application was in a secured area of the application. If it was in the secured area, then an authentication protocol is triggered prior to allowing the user to return to the previous screen in the secured area of the application on the mobile computing device. In another embodiment, geolocation dependent information is provided to a user via an application on a mobile computing device.