Multi-Device Authentication Token Generation for Portal Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing infrastructure faces challenges in providing enhanced information security while optimizing technical performance and operational efficiency, particularly as user account portals handle increased user access and secure information, making it difficult to prevent unauthorized access effectively.
Innovation Solution
A computing platform generates authentication tokens and sends notifications to registered devices for multi-device authentication prompts, allowing valid authentication inputs to grant access to user account portals, thereby enhancing security and convenience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional authentication methods are used to allow user access to portals, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent introduces a push notification system as an intermediary between the user's registered device and the portal access request. When a user attempts to access a portal, the system sends a push notification to the user's mobile device, which then relays authentication confirmation back to the portal system. This intermediary mechanism maintains security while improving ease of operation by allowing users to authenticate with a simple tap on their mobile device rather than complex password entry.
2Reliability
If multi-device authentication is implemented to improve security, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent extracts the complex authentication logic from the portal server and relocates it to the user's mobile device. The mobile device independently validates authentication requests and communicates only the authentication result (success/failure) back to the portal. This extraction reduces the computational burden and complexity on the portal server while maintaining security, as the critical authentication decision-making is performed on the user's own device.
3Reliability
If push notification authentication is used to enhance security, then security is improved, but loss of time is worsened due to notification delivery
Solution Approach 1:
The patent implements preliminary action by requiring users to pre-register their mobile devices with the portal system before needing authentication. The mobile device is预先 configured with the portal's authentication endpoint and communication protocols. When authentication is needed, the pre-configured device can immediately receive and respond to push notifications without requiring any setup or configuration time, thus minimizing authentication delay while maintaining security.
Data Source
AI summary
Aspects of the disclosure relate to preventing unauthorized access to secured information systems. A computing platform may receive, from an end user desktop computing device, a request to login to a user account associated with a user account portal. In response to receiving the request, the computing platform may generate an authentication token in an authentication database and may send a notification to at least one registered device linked to the user account. After sending the notification, the computing platform may receive, from the at least one registered device, an authentication response message. If the authentication response message indicates that valid authentication input was received, the computing platform may update the authentication token to indicate that the request to login to the user account has been approved. After updating the authentication token, the computing platform may provide, to the end user desktop computing device, access to a portal interface.