Multi-Channel Authentication Using Token Association
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic commerce faces vulnerabilities in user authentication due to attacks on simple user credentials, leading to risks of financial loss and erosion of user confidence, as existing mechanisms are susceptible to interception and require additional security measures that increase service provider costs and inconvenience users.
Innovation Solution
Implementing a multi-channel authentication method where a user provides authentication parameters over multiple channels, using a token value to associate parameters across channels, ensuring that all authentication information is not exposed in a single data stream, thus preventing unauthorized access even if one channel is intercepted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple channels are used for authentication, then security is improved, but device complexity increases
Solution Approach 1:
The authentication process is segmented into multiple independent channels (first channel for initial authentication, second channel for approval). Each channel handles a specific authentication parameter, so that compromise of one channel does not affect the security of other channels. The token value acts as a connector that links the segmented authentication steps across channels.
2Reliability
If time-change augmented authentication is implemented, then security is improved, but user convenience deteriorates
Solution Approach 1:
A token value is introduced as an intermediary element that facilitates the authentication process across multiple channels. The token is generated on the first channel and validated on the second channel, serving as a mediator that connects the authentication steps without requiring the user to manually synchronize time-dependent secrets across devices.
Data Source
AI summary
A method for using multiple channels to access a resource, wherein an authenticated user requests a resource that requires a second authentication parameter over a first channel, a token value is transmitted to the user on the first channel, and the user transmits the token value and a second authentication parameter over a second channel. The token value is used to associate the first authentication parameter to the second authentication parameter, whereby the user is allowed access to the resource on the first or second channel.