Multi-Channel Authentication Using Token Association
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic commerce faces vulnerabilities in user authentication due to attacks on simple user credentials, leading to risks of financial loss and identity theft, and existing mechanisms that change secrets increase service provider costs and inconvenience users.
Innovation Solution
Implementing a multi-channel authentication method where a user provides authentication parameters over multiple channels, using a token value to associate parameters across channels, ensuring that all authentication information is not exposed in a single data stream, thus preventing unauthorized access even if one channel is intercepted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple authentication parameters are transmitted over a single channel, then the authentication process is simple and fast, but the security is compromised because all authentication information is exposed in a single data stream that can be intercepted
Solution Approach 1:
The authentication parameters are segmented and transmitted over multiple separate channels rather than a single channel. The system divides the authentication process into multiple parts, with each part transmitted through a different channel (e.g., first channel for initial authentication, second channel for additional verification). This segmentation ensures that interception of one channel does not compromise the entire authentication process.
Solution Approach 2:
The patent transitions from a single-dimensional authentication approach (one channel) to a multi-dimensional approach (multiple channels). By adding the dimension of multiple transmission channels, the system increases security without significantly increasing user burden, as the additional channel can be accessed through familiar devices like mobile phones.
2Reliability
If secret data is changed over time in an unpredictable fashion, then the security against attacks is improved, but the service provider costs increase and user convenience decreases
Solution Approach 1:
The patent introduces a token as an intermediary element that facilitates the authentication process. The token is transmitted through a second channel and serves as a bridge between the user's initial authentication attempt and the service provider's verification process. This intermediary approach simplifies the user experience compared to managing multiple changing secrets, while still providing strong security through multi-channel verification.
3Reliability
If multiple channels are used for authentication, then the security is enhanced by preventing single-point compromise, but the device complexity and implementation cost increase
Solution Approach 1:
The patent employs universally accessible devices and channels for authentication, such as using mobile phones (which most users already possess) as the second channel. This universal approach allows the system to achieve multi-channel security without requiring users to obtain or manage specialized hardware, thereby reducing implementation complexity while maintaining enhanced security.
Data Source
AI summary
A method for using multiple channels to access a resource, wherein a first user requests a resource that requires an indication of approval from a second user, a token value is transmitted to the first user on the first channel, and the second user transmits the token value and a second authentication parameter over a second channel. The token value is used to associate the first authentication parameter to the second authentication parameter, whereby the first user is allowed access to the resource on the first. The first and second user may be independently authenticated in some implementations and not independently authenticated in other implementations.