Mobile Device Multi-Authenticator Security Configuration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer operating systems allow only a single authenticator to be chosen for user authentication, compromising security if that authenticator is insecure, as unauthorized access can occur through the insecure method.
Innovation Solution
Configuring mobile devices to require multiple consecutive authenticators, allowing users or administrators to select from a variety of authenticators such as smart cards, fingerprints, facial images, retinas, irises, voices, and DNA, to increase security by adding layers of authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple authenticators are used consecutively, then security is improved, but device complexity increases
Solution Approach 1:
The authentication system is segmented into multiple independent authenticator components (biometric scanner, smart card reader, PIN entry) that can be individually selected and configured. Each authenticator operates as a separate module, allowing the system to divide the authentication process into discrete, manageable segments that can be combined in sequences to achieve desired security levels without overwhelming complexity.
Solution Approach 2:
The authentication system is designed to be dynamic and configurable, allowing administrators to create different authentication sequences tailored to specific security requirements. The system can adaptively select which authenticators to use and in what order, rather than enforcing a fixed rigid structure. This dynamic configuration capability allows the system to optimize between security and complexity based on specific use cases.
2Reliability
If multiple authenticators are configured in a predetermined order, then unauthorized access is reduced, but ease of operation decreases
Solution Approach 1:
Authentication sequences are pre-configured and stored in the system before actual authentication events occur. Administrators can define multiple authentication sequences in advance, specifying which authenticators to use and in what order. When a user needs to authenticate, the system simply executes the pre-defined sequence, eliminating the need for users to manually configure or decide which authenticators to use during the authentication moment, thus maintaining ease of operation while ensuring security.
3Ease of operation
If a single authenticator is used, then ease of operation is maintained, but security is compromised
Solution Approach 1:
The authentication system is designed with multi-functionality, supporting multiple types of authenticators (biometric, smart card, PIN, token) within a single unified authentication framework. This universal system can accommodate one or more authenticators depending on security requirements, allowing the same system to provide simple single-factor authentication when needed while also supporting complex multi-factor authentication sequences when higher security is required, thus maintaining ease of operation across different security levels.
Data Source
AI summary
The described embodiments relate generally to methods and systems for user authentication for a computing device. In one embodiment, the method comprises: enabling receipt of input in relation to selection of a plurality of authenticators for consecutive use by the computing device to authenticate a user; and storing reference information identifying the selected plurality of authenticators in a memory of the computing device. The computing device may comprise a mobile device.