Multi-Device Authentication for Secured Information Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information systems face challenges in ensuring the security and safety of user data while optimizing technical operations, particularly in preventing unauthorized access to resources through electronic portals.
Innovation Solution
Implementing multi-device authentication techniques, where a computing platform selects appropriate authentication methods based on user activities, generating and sending one-time passcodes to registered devices, and validating inputs to grant access to user accounts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used, then system operational efficiency is optimized, but security against unauthorized access deteriorates
Solution Approach 1:
The authentication system dynamically adapts its complexity based on risk assessment. The computing platform evaluates authentication requests in real-time and adjusts the authentication method accordingly, using simpler methods for low-risk scenarios and more complex multi-device authentication for high-risk scenarios, thus maintaining both security and operational efficiency
Solution Approach 2:
The system changes authentication parameters (method complexity, number of devices required) based on the assessed risk level of each authentication request. This allows the system to optimize between security and efficiency by adjusting authentication strength according to the specific context of each access attempt
2Reliability
If strong authentication methods are implemented, then security is improved, but device complexity increases
Solution Approach 1:
The authentication system is segmented into multiple independent devices, each capable of generating and validating one-time passcodes. This distributes the authentication complexity across multiple simple components rather than requiring one complex centralized authentication mechanism
Solution Approach 2:
One-time passcodes serve as intermediaries between the user and the authentication system. These temporary, single-use codes provide strong security without requiring complex continuous authentication mechanisms, simplifying the overall system while maintaining high security standards
Data Source
AI summary
A computing platform may receive, from a client portal server, a request to authenticate a user to a user account a client portal. Based on identifying an activity the request, the computing platform may select a multi-device authentication method for authenticating the user. The computing platform may generate a first one-time passcode for a first registered device and a second one-time passcode for a second registered device, and may send the one-time passcodes to the registered devices. Thereafter, the computing platform may receive and validate one-time passcode input from the client portal server. Based on validating the one-time passcode input, the computing platform may generate a validation message directing the client portal server to provide the user with access to the user account, and may send the validation message to the client portal server. In some instances, different authentication methods may be selected for different activities.