Multi-Device Authentication via One-Time Passcodes

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing information systems face challenges in ensuring the security and safety of electronic portals while optimizing technical operations, particularly in preventing unauthorized access using traditional authentication methods.

Innovation Solution

Implementing a multi-device authentication technique that generates and verifies one-time passcodes across multiple registered devices, using a computing platform to validate inputs and grant access based on authentication state information and user preferences.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used, then system simplicity is maintained, but security against unauthorized access deteriorates

Engineering Contradiction:

ImprovesecurityVSAvoidauthentication system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The authentication process is segmented into multiple independent components: primary authentication factor (username/password), secondary authentication factor (one-time passcode), and device verification. Each component operates independently but contributes to the overall security validation, allowing the system to enhance security without creating a monolithic complex authentication structure

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A computing platform acts as an intermediary between the client portal server and the authentication factors. This intermediary receives authentication requests, coordinates the collection and validation of multiple authentication factors from different devices, and returns the final authentication result, thereby managing complexity centrally rather than distributing it across the entire system

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If multi-device authentication is implemented, then unauthorized access prevention is improved, but authentication process time increases

Engineering Contradiction:

Improveunauthorized access preventionVSAvoidauthentication process time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

Devices are pre-registered with the computing platform before authentication is needed. The platform stores device identifiers and establishes trusted relationships in advance. During actual authentication, the system simply verifies the pre-established relationships rather than creating new verification channels, significantly reducing authentication time while maintaining security

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system automatically generates one-time passcodes, validates authentication factors, and makes access decisions without requiring manual intervention from administrators or security personnel. This automated self-service approach processes multiple authentication factors rapidly, preventing unauthorized access while minimizing the time users spend on authentication

Inventive Principle:

Principle #25Self-service

3Reliability

If multiple authentication factors are required, then security is enhanced, but ease of operation deteriorates

Engineering Contradiction:

ImprovesecurityVSAvoidauthentication ease

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The computing platform provides a universal authentication service that handles multiple authentication factors through a single integrated interface. Users interact with one consistent system regardless of which devices or authentication methods are involved, and the platform uniformly processes all authentication types, making the enhanced security transparent and easy to operate

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system provides real-time feedback to users during the authentication process, indicating which authentication factors have been successfully validated and what remains. This clear feedback mechanism guides users through the multi-factor process efficiently, reducing confusion and improving ease of operation while maintaining the required security standards

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS10305891B2Preventing unauthorized access to secured information systems using multi-device authentication techniques

Publication Date: 2019.05.28 BANK OF AMERICA CORP

AI summary

A computing platform may receive, from a client portal server, a request to authenticate a user to a user account. The computing platform may generate a first one-time passcode for a first computing device associated with the user account and may send, to the first computing device, the first one-time passcode. The computing platform also may generate a first registered-device authentication prompt for a second computing device associated with the user account and may send, to the second computing device, the first registered-device authentication prompt. Thereafter, the computing platform may receive first one-time passcode input and a first response to the first registered-device authentication prompt, which the computing platform may validate. Based on the validating, the computing platform may generate a validation message directing the client portal server to provide the user with access to the user account, which the computing platform may send to the client portal server.