Multi-Device Session Correlation for Accurate MFA Scoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing multi-factor authentication (MFA) systems face challenges in generating accurate scores when users authenticate from different devices, as sessions on these devices are uncorrelated, leading to inconsistent and less reliable authentication outcomes.
Innovation Solution
Perform session correlation between multiple user interface devices to generate a single, more accurate MFA score by establishing sessions on different devices and using a server to correlate device attributes and biometric data, generating a unified authentication score.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate MFA scores are generated for each device session, then each session can be evaluated independently, but the overall MFA accuracy decreases because the sessions are uncorrelated
Solution Approach 1:
The patent merges multiple device sessions into a unified MFA score by correlating sessions through shared user identifiers. The server combines authentication data from multiple devices (e.g., smartphone and desktop) that belong to the same user, creating a consolidated risk assessment that reflects the user's overall authentication status across all devices rather than evaluating each device in isolation.
Solution Approach 2:
The patent introduces a session correlation mechanism as an intermediary layer between individual device sessions and the final MFA score. This correlation layer uses user identifiers to link sessions across devices and applies weighting factors to reconcile potentially conflicting authentication states, serving as a mediator that transforms multiple uncorrelated session scores into a unified accurate MFA assessment.
2Measurement precision
If a single unified MFA score is generated from correlated sessions, then the authentication accuracy improves, but the system complexity increases due to session correlation requirements
Solution Approach 1:
The patent changes the parameter representation by introducing session correlation identifiers and weighting factors. Instead of treating each session as an independent binary authenticated/not-authenticated state, the system transforms session data into correlated parameters that reflect user identity relationships and device trust levels, enabling more precise authentication scoring through mathematical combination of weighted session states.
3Reliability
If session correlation is implemented across multiple devices, then the MFA score better represents the user's authentication level, but the processing requirements and system complexity increase
Solution Approach 1:
The patent applies preliminary action by pre-establishing device relationships and user associations before authentication events occur. The system pre-correlates devices with user identifiers and pre-calculates trust relationships, so that during actual authentication, the server only needs to retrieve and combine pre-prepared session data rather than performing complex real-time correlation analysis, significantly reducing processing energy requirements.
Data Source
AI summary
Devices, methods, and computer-readable media that perform sessions correlation for multiple device authentication. In one embodiment, a server may include an electronic processor communicatively coupled to the memory, the electronic processor is configured to: establish a first session with a first user interface device, establish a second session with a second user interface device that is different from the first user interface device, receive, from a third-party server, a score request including information that correlates the second session with the first session, generate a score on a correlation of the first session to the second session, and output the score indicating a level of multiple device authentication, the score also being a control signal for authorizing or denying a multi-factor authentication at the third-party server.