Multi-Channel Authentication Token Association
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic commerce faces vulnerabilities in user authentication due to attacks on simple user credentials, leading to risks of financial loss and identity theft, and existing mechanisms that change secrets increase service provider costs and inconvenience users.
Innovation Solution
Implementing a multi-channel authentication method where a user receives a first authentication parameter over one channel and a second authentication parameter over another channel, using a token value to associate these parameters and provide secure access to resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple authentication parameters are transmitted over a single channel, then authentication can be completed quickly, but security is compromised due to interception risks
Solution Approach 1:
The authentication parameters are segmented and transmitted over multiple separate channels rather than a single channel. The first authentication parameter is sent over a first channel while the second authentication parameter is sent over a second channel, preventing an attacker from intercepting all authentication information through a single point of compromise.
Solution Approach 2:
A token value acts as an intermediary that associates the first authentication parameter with the second authentication parameter. The token is transmitted over the first channel and then used to link the parameters during the association phase, enabling secure multi-channel authentication without requiring direct communication between all components.
2Reliability
If secret data changes over time, then security against interception is improved, but user convenience deteriorates due to potential device loss and additional authentication requirements
Solution Approach 1:
The changing secret data is segmented into multiple authentication parameters transmitted over different channels. Even if one channel is compromised or the user loses one device, the segmented nature ensures that not all authentication information is lost, maintaining both security and user convenience.
Solution Approach 2:
Different authentication parameters can have different characteristics suited to their respective channels. The system can configure specific parameters for specific channels based on security requirements and user convenience considerations, optimizing the balance between security and ease of operation for each channel.
3Reliability
If additional authentication steps are implemented, then security is enhanced, but service provider costs and user inconvenience increase
Solution Approach 1:
The token value is transmitted in advance over the first channel before the association phase. This preliminary transmission prepares the system for the subsequent association of authentication parameters, reducing the time required during the actual authentication process while maintaining enhanced security through multi-channel verification.
Data Source
AI summary
A method for using multiple channels to authenticate a user, wherein a first authentication parameter from a first device associated with a user is received over a first channel, a token value is transmitted to the user on the first channel, and the user transmits the token value and a second authentication parameter over a second channel. The token value is used to associate the first authentication parameter to the second authentication parameter, whereby the user is authenticated on the first channel.