Mobile Device Authentication via Token Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods relying on passwords and keys are vulnerable to hacking, necessitating more advanced security measures to protect sensitive data during digital transactions.
Innovation Solution
A system that uses a mobile device-associated authentication process, where a server compares user credentials including account identifiers, authentication tokens, and mobile device identifiers to confirm user identity, ensuring secure transactions by requiring matching information from both the user and their mobile device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If passwords and keys are used for authentication, then ease of operation is improved, but reliability deteriorates due to vulnerability to hacking
Solution Approach 1:
The authentication credentials are segmented into two separate components: authentication tokens stored on the mobile device and user credentials stored on the server. This segmentation ensures that even if one component is compromised, the other remains secure, thereby improving reliability while maintaining ease of operation through the mobile device interface.
Solution Approach 2:
The mobile device acts as an intermediary between the user and the server during authentication. It stores authentication tokens and facilitates the authentication process by communicating with the server, thereby enhancing security without significantly impacting user convenience.
2Reliability
If multiple authentication parameters are required, then reliability is improved, but device complexity increases
Solution Approach 1:
The mobile device is designed to perform multiple functions: storing authentication tokens, generating authentication requests, and communicating with the server. This multi-functionality allows the system to implement multiple authentication parameters without proportionally increasing device complexity, as a single device handles all authentication-related tasks.
Data Source
AI summary
According to one embodiment, a system including a memory and a processor is provided. The memory may be operable to store a plurality of accounts. Each account may be associated with a user and with a mobile device. The processor may be coupled to the memory and operable to receive user credentials, sent by a requesting user and originating from a requesting device, in conjunction with a request for authentication. The user credentials may include an account identifier. The processor may be further operable to retrieve, from the plurality of accounts, the account associated with the account identifier that matches the account identifier included in the user credentials. The processor may compare information included within the user credentials with information associated the account. If the information included within the user credentials matches the information associated with the account, the processor may send an authentication-confirmation message to a second device.