Multi-Device Authentication Using Segmented One-Time Passcodes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information systems face challenges in ensuring the security and safety of user data while optimizing technical operations, particularly in preventing unauthorized access to resources through electronic portals.
Innovation Solution
Implementing multi-device authentication techniques, where a computing platform generates and sends one-time passcodes to registered devices, requiring users to input these codes to access their accounts, thereby enhancing security and convenience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used, then system accessibility is maintained, but security against unauthorized access deteriorates
Solution Approach 1:
The authentication process is segmented into multiple independent verification steps: device registration, one-time passcode generation, passcode transmission to multiple devices, and validation. This segmentation ensures that no single point of failure compromises security while maintaining user convenience through multiple authentication pathways.
Solution Approach 2:
Devices are registered in advance with the authentication system before actual authentication is needed. This preliminary action allows the system to have pre-configured trusted devices ready to receive and validate one-time passcodes, enabling rapid authentication without compromising security protocols.
2Reliability
If multi-device authentication is implemented, then security is improved, but device complexity increases
Solution Approach 1:
The authentication system is designed to work across multiple device types and platforms universally. The same authentication protocol and one-time passcode mechanism function across smartphones, tablets, and computers, reducing the need for device-specific complexity while maintaining high security standards.
Solution Approach 2:
A central authentication server acts as an intermediary between users and multiple devices. This mediator handles the complex tasks of passcode generation, distribution, and validation, simplifying the user experience while managing the inherent system complexity centrally rather than distributing it across multiple devices.
3Reliability
If multiple one-time passcodes are generated and sent to different devices, then unauthorized access prevention is enhanced, but processing time increases
Solution Approach 1:
One-time passcodes are generated and transmitted periodically to multiple registered devices simultaneously. This periodic action ensures that authentication can proceed rapidly as all devices receive their passcodes at the same time, preventing bottlenecks and minimizing the time users need to wait for authentication to complete.
Solution Approach 2:
Registered devices automatically receive and can independently validate one-time passcodes without requiring manual intervention from administrators. This self-service capability accelerates the authentication process by eliminating manual verification steps while maintaining robust access control through automated validation protocols.
Data Source
AI summary
A computing platform may receive, from a client portal server, a request to authenticate a user to a user account associated with a client portal provided by the client portal server, as well as device selection input selecting a first registered device and a second registered device to receive one-time passcodes. The computing platform may generate a first one-time passcode for the first registered device and a second one-time passcode for the second registered device, and may send the first one-time passcode to the first registered device and the second one-time passcode to the second registered device. The computing platform may receive and validate one-time passcode input. Based on validating the one-time passcode input, the computing platform may generate a validation message directing the client portal server to provide the user with access to the user account, and may send the validation message to the client portal server.